Freedom of Information 

and 

Privacy Acts 

FOIPA# 1056287 and FOIPA#1056307-1 
Subjects: DCS-3000 and RED HOOK 
File Number: DIVISION DOCUMENTS 
Section: 38 



Federal Bureau of Investigation 



I I could you write up a little sc»>tething about your case last week and how the DCS3000 and th^ 
worked for you {good or bad). This is low priority and can be done when you have a moment. 


Thanks... 




b<;: 

fograms h'^L 


uiicmoolPtCD 


U W CL* 66 inC & 


I ~~l(OTD) (FBI) 

From: I I tPGi (FBI) 

Sent: Monday. Januarv23. 2 006 8:13 A M 

To: r ^ l OTDt fFBII il I fOTD) (FBI) 

Subject: ^ ^ ^ Issues 


SECRET/yORCQN.NbFORfJ 

^cordI 


b 1 


Good Morning gentlemen. Please read the message below rega rding mv Case Agents target The Agent still insists that 
the target is using text messaging, despite all my efforts to find it I fc old me that if the phone was used for any 

SMS it would show up in the DCS-3000. I am n ot convinced that the target is using his I bhone for SMS. Is there 

anything I'm missing? Thanks for your time | * * 


— OriginaJ Message — 

From: | ~ 

Sent: j « i i nursaav, January liT 

To: [ S 1 I - — - 

Subject: * ^ ' IwoUIUl^ues 




lh6 

b7c 





I 


h 1 


H 


IS) 




Regarding the communications OTD is attempting to find a way to recdver (and cover) via|_^_^_J the following may 

h&f A' 


f ^ I USB tntemet£tmeJbalJs designed to integT3TF9TTn^tnS^kype inter 
1^1 revealed thal took above information and posted it on tha 

^ conduct Inten ications, primarily with computer types. * 


^S//FISA) FISAhigh-speedj ntefh et Pridducf ^vealed th j j ownloaded fnforrri atjgiajiiLU^^fltjotics 

USB int<>mp^Phnne> thatje designed to ioteSrsiS Wn W6*Skype inte rnet telephony applicatio n. Produt^ 


y 


ebsite, a vrePSi i gn e TlS 


^OtiCE 

nisto 


We also need to follow up with OTD as to why the text messaging isn't being intercepted. 


Thanks. 

- i-- 'C 

□ 

DATE; 06-19-2007 

CLASSIFIED BY 65179 DITH/KSR/DK 

PEASOH: 1.4 iC.r^r) 

DECLASSIPF ON: 06-19-Z032 


ALL IMFORKATIOK COHTAIlJED 
HFPEII^ IS TJWCLAS^jIFIED EXCEPT 
NHERE SHOTjJN OTHEPFI^E 





214 




UNaLAAJhIl ICb 
NON-RECORD 


— Ofiflinal Mes sage 

From; 

Sent; 

To: r 

$ut4«ct; 


(IP) (FBI) 


f lP^ 

Fndav. January ^006 9:39 AM 

I fOTD) (F0I) 

RE:"Video for BiSiyW ^ 


UNfhAggICIEn 

NON-RECORD 


Thanks 


— Original 

From; I 

Sent; ' 

To: r 

Subject; RE^ Video for DCS3' 


I (OTD) (FBI) 
inursoav. January 1^ . Joo6 6:3'* PM 


¥ 

wo 


(Ffll) 


NON-RECORD 


Yes, it requires ar additional video card and Windows 2000. I’lt have 



give you a call to work out the details. 


---Oriainai Message 

From: \ ll PI fFBh 

bb Sent; Thursday. January 19. 2Q Q6 10:41 AM 

b7” To: I I tOTP) (FBI) 

Subjecc vmeo tor ix..sjuuu 

UNCLAABIPim- 1 2 

NON-RECORD b/E 


□ 

Is there a way to display the DCj triages on a separate monitor in our Title III Room. This would allow 


SEC 




the case agents to view th d h vithout actually touching our equipment. ( checked the computer (rack hi e 

mount) for outputs for video. The monitor has inputs for ^Video and Composite Video, but I did not see any 
outputs. Can you help? 

I - I Special Agent h .r, 

Tec|tuucal£cfffirams - Indianapolis Division j., ^ . 

31 1 R eel!) 


iTm I ii 

- uiiillajo ir». — 


u 


I IfOTDWFBh 


From: 

1 

^^OTDl (FBI! 

Sent: 

To: 

VA/aH n Acrlai/ 

lanM-jn/l-l OHOft 10 00 PM 

1 

lOTDl (FBh 


Subject: DCS-3000 Response to Questions Posed by FISA Court Judge 


SENSITIVE BUT UNeLASS IP ie tT 
NON-RECORD 


Here are the questions posed which we discussed earlier today; 

1. Identify and fully describe the DCS-3000 database. 

2. The FBI's practice regarding storing, accessing, marking, deleting, and handling of FISA materials within the system. 

There is another question re minimization procedures which could be adopted on an expedited basis, but I don't 
believe this would pertain to the DCS-3000. It seems the time line for completing this is on hold, so please do not rush to 
get this completed. Thanks. 

he 

b7C 


SENSITIVE BUT UHOLAaS I W eP 
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OTD) (FBI) 


From: 

Sent: 

To: 1 

Cc: ^ 

Subject; 


I If OTD^ (FBI) 


UCS-5000 IS 


J(OTDHFBI):| 

Dn bri/adtr. 


I pTnWFRhf"" 
BRI/ADTRAN Cost Analysis 


JOTDHFBI) 


NON-RECORD 


The following represents the costs and other factors involved in the installation of BRI Cards an> 
assignments for the DCS-5000 program: 


icense 


EQUIPMENT b2 

I 

ADTRAf ^ I 

SUMMARY 


License cost per iDEN $10,000.00 

BRI/ADTRAN (pair) from Raytheon $ 3,229.00 

Installation average per BRI approximately $8,500.00 

Average OUTAGE perTIU 1 to 3 hours 


Examples: 

Site 


- 1 BRI installed = 

Site 


- 1 BRI installed = 

Site 


-2 BRI PROPOSED . ... = 

Site 


-3 BRI PROPOSED .... = 

Site 


-3 BRI PROPOSED . . .= 

Site 


-3 BRI PROPOSED .= 


INVENTORY - Remaining DCS-5000 BRI/ADTRAN; 

BRI/ADTRAN (pair) = 46 X $3, 229.00 = $ 148, 534.00 (can it be used for F """T tudio config? See 

below.) 

b2 

??? AttematB solution; DCS-30Q£| l^udh (reDlace\ foncffo/r j [??? 


NOTE: We pay a premium forequipt approx. 3-times the commericai rate!!! PLUS !!! 


Your Tho ughts, 

— I b"C 
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UNCLASSIFIED 



[ 


From: 

Sent: 

To; 


1; 

t 


Cc: 

Subject: 


lOTD) (FBQ 

I J (OTD) (FBI) 

Thursday January 05 20062:03^ 
Tf WF^ JFBn j 


IfWF^ {FBhJ 

I flUllL/h 


^FRlI 

(DUfFBIll imsuFBn 

I l OTPifFBlT 

DCSNET connection to an RA in your division 


IHOI fF BDi , 


IfCGWFBhT 


rjifia 




NON4tECORD 


Hi all. 

Your offices have been identified to receive the next step in the DCSNET disaster recovery plan. This involves identifying 
one RA from each of your divisions to which TICTU will build a DCSNET connection. This way, in the event of a disaster 
at your main office, a failover site for DCS-3000 collections will already be ready to use. TICTU will be paying for these 
circuits. 

Please choose an RA in your division that you would like to have a DCSNET connection and respond to this email with the 
RA name, address, and any specific demarc instructions you may have. We also need the names and phone numbers for 
two points of contact (one of which needs to be local to the RA). We can only build circuits to regular RAs, not covert 
offsites. You may choose an RA that already has a connection that you are currently paying for. but we cannot just take 
over payments: we wilt have to build a new circuit there. 

if you can get this info back to me by next Thursday, January 12, you can expect your circuits about 2 months after that. 

Please give me a call if you have any questions or concerns about this, 
thanks! 


UNCLASSKliO 


From: 

Sent; 

To: 

Cc: 

Subject 


[OTDl (FBI) 

[ 


b7f; 


Monday 




enT20Q5 12:42 PM 


(OTD) (FBI) 
HO) (FBI) 
Another icon for CMP DCS 3000 


3 


SENSITIVE F ‘" ‘""inrr 

NON-RECORD 


I:-:;: 


Would it be possible for^gyJjj^create another icon for a new FISA tgtf 
same manner as we download ! 1 

It would make life easier for our TS and the weekend tech duty agent. 


Thanks, 


L7C 


]so we can download it in ttie 
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713 



NON-RECQRD 

Thanks for following up. The patch seems to be working great and the addition of the connectivity indicator is very helpful. 
— Original Message — 



NON-RECORD 


Good Morning - Wanted to check with you to see how frie DCS 3 000 pa tch was working with th 
getting the out of stack errors or locking up? Thanks for the info .l l 


Are you still 
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From; 

Sent: 

To: 

Subject; 




, SEUfitT 

JCOTD) (FBI) 

3 21, 2005 2:34 PM 
(OTD) (CON) 

itation on 12/5/2005, on TTA abilities 


NON-RECORD 


an you do the submissions? 


□ 


— Original Mess^ 

From: L- 

Sent; j; 

To: r 

Subject: R 

UWCCW55IF1EP 

NON-RECORD 


_|[OTO) (FBI) 
jgjljerll, 2005 2:26 PM 
I (OTD) f FBI) _ 

l (OTD) (FBl) i 

entation on 12/5/2005, on TTA abilities 


tOTD) {FBI); 


(OTD) (FBI); 


Someone fron 


— Ori0nal 

From: 

Sent: 

To; 

Cc 

Subject: 


group will be attending also. All of the names should be submitted together. 


(OTD) (FBI) 

}t21, 2005 1:40 PM 


D) (FBI) 
yTD) (CON); 
I on 12/5/20 


)j J 

Ou;j, on 1 1 A aol 


(OTD) (FBI) 
'llitles 


NON-I^CORD 


AS 1115 schedule stands toda; 
be joining him. 


as volunteered to represent the DCS-5000 team. I do not think any one will 


a 

IS neeos 


please forward the infcHirtation asked b 
i6d. Thanks. 


him before the 30th. Mso, advise if additional assistance 


Orig|[; 

From: T 
Sent 2 

To: L 

Cc= C 

Sid^jectn 


I (oro) (FBI) 
sjri>er 16, 2(K 


resentabon on 1^/5/2005, on TTA abilities 


tOTO) (FBI); 


;OTD) (FBI); 


NOW-RECORD 


Hello Guys, 


L7C 



This brief/EXPO which is requested by Counter-Terrorism is being pushed by the front office. 

I believe the DCS-5000, Portable Redwolf and the DCS-3000 platform is what the division is interested in. 
Please advise and us ^ our point of contact. 

I I 


PS 


let's put this on the agenda for Monday! 


Origina|_M«sa2e;;;;^__^ 

From: I r OTDIfFBH 

Sent: 15, 2005 1:36 PM 

To: I P TD) (FBI) ■ 

Subjecf T r resentaiion on 12/5/2005, on TTA abilities 

UWUJttrijIl-lfcU" 

NON^ECORD 


-bi; 

b'j 


here is the fotlow-up on our brief conversation this morning. As its stands right now OTD is 
ed to rr 


Afternoo i 

scheduled to make a presentation like the one made to/at FBI HQ in May of this year. If you could send me the 
name(s) of TICTU personnel that will be handling the TiCTU table, I’ll need their Name, DOB, SSAN, and Status 
(Agent v Support) by 1 1/30/2005. 1 i sec urttv llke .ci to know who is carrying a gun in the bldg. Here is a simple 
set of driving instructions from Quantico to thi 1 1 





Hopefully, I haven’t missed any major item, if I did drop me a line. Thanks 


U HOLADO i nCD 


utMbA&siCIES. 

iiiuni aggiPiPr^ 


uNw-A3Airrcn 


From: 

Sent: 

To: 

Subject: 


I (ANHFBI) 

3 1 , 20()5 7:0 3 PM 
OTD) (FBI)T“ 
' machine 


OTD) (FBI) 


NON.RECORD 


□the 2 boxes arrived today. Thanks! 

I | l am conskJefing switching from our old DCS-3000 computer to the new one with vour telephonic help starting at 
’ 4:30 am Anchorage time (8:30 am your time) on Tuesday morning, 1 1/22. This would give us about 2-3 hours before our 
pen register and Title lit targets begin using their phones. Would this time work for you? 


^ Anchorage 

— Original 

From; I l /OTDi (FBI) 

Sent: ^^05 6:24 AM 

TO! ■ ~] fAN> (Fai) 

Subject: New DCS 3000 machine 


NON*RECORD 


I sent you a new DCS 3000 tower workstation today. It should have a flat screen monitor, an edgeport for your 
modem conn^ions, and a new 16 port switch for your DCS 3000 network- Let me know when you want to hook the 
new system up. We probably need to have both systems running at the same time to transfer data from the old 
machine to the new one. 

Thanks... 


222 



I I 


I'm in NY this week so maybe you ancT 


br 

b'-. 


Icould talk about this a little more. Basicaitv l I s supplying new 
workstations for all of the Red Wolf and Vb work stations, we are not moving the old ones. By workstations, I mean a 
computer table/desk to set the client terminals on and for a LS or AgenUo work at. It would be nice to have two additional, 
matching work stations per T-3 room to set the DCS3000 clients o n. I [had not pl anned to purchase these. I was 

inquiring on the availability of budget for buying new ones to match I ones. l c ould tell you the cost, if this is 

not an option, we will or^ably have to select the best ones from Clark Street to move. It would be much more desirable to 
have units that matctl Ifor fit and function if there is a way to pay for them. 

I'll try to check e-mail as I can, let me know what you think. 


Thanks. 


Sincerely, 


Ir. 'S 


Chi cago Divisio n 
312 


3J2\ 


\Mce 

ell 



foinal Messaoe- 


Sent: Monday, November 14, 2005 10:57 AM 




(OTD) (FBI) 
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Toil 

Cc: 




CG) (FBI) 
l(OTD) (CON) 


Subject: FW: Chicago new building 


to Til- 


NON-RECORD 


□ 

Our plan is (was ?) that you will be moving your existir^g DCS-3000 workstations to the new site. Is this incorrect? 


— O riQirtal Message-— 

From ! I (OTD) (CON) 

SenJiJj2Qd2^,_yovemberH, 2005 8:19 AM 
To i I (OTD) (FBI) 

Subject: FW: Chicago new building 


NON-RECORD 






Any idea on whom this request/inquiry should be forward to? 
— -Oriotnal Message--- 
From ) k CG) (FBI) 

SenJj^haj2^g^,_No«rriber 10, 2005 1:53 PM 

Tol l ^fOT^^ 

Ccl IGI (F6I); | 

Subject: Chicago new building 


] (OTD)(CON) 


LfFriAaoiriEB 

NON-RECORD 

b-;: 

b7c 


Wf> arg maktnn n ur plans to move into our new Chicago Office in April of 2006. I have been wjrking withF^^^^” 
I b rouDi and they are supplying workstations for our Voice Box and Red Wolf client terminals in our T-3 

rooms. The "vwirkstations" are basically a 48" wide work table with shelf for the VB or Red Wolf client computer to sit 
on so an Agent or LS can sit and monitor the T-3 or FISA. They tell me that they have not planned to supply 
workstations for DCS3000 terminals. Every T-3 room in Chicago has two DCS3000 terminals for live pen monitoring 
and cell site information. Does your group have a facilities person or budget to supply workstations to support the 
DCS3000 terminals? Can you recommend someone from your group friat would be the appropriate contact person for 
me? 


SE^T 


224 




UWlLLUhttJinfeD • 



tc7C 


Thanks for your assistance with the various DCS3000 issues. You mentioned you could probably provide us a half-rack? 
Wilt it be open or closed in cabinet? The UPS would be great too. Do we need to put in a formal RMS? Let us know 
when you want the the second new server {to replace the old server ^" b rought online. 

Aiso. l f nentioned some unusual (and different) behavior viHth the new client machine. We will reach out to you to 
discusS' II I3ler. Thanks. 


tLSUH IS^rnSlogy Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
O perational T^ hnotoav Division (OTD) 

309 {Desk) 

95-1 'Cell) bi: 

I-/;-- 
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From: 

Sent: 

To: 

Cc: 

Subject: 




RE: DCS-3000 


IaL) (FBI) 

7, 2005 2:50 PM 

, |(OTD)(FBI) 

pTDT{FBI) 


VrtCt^^SiElED 

WON-RECORD 


b':'C 


[!□ 

I've t 


I've been advised that the CT State Police were already avirare of the location of the target without our info. Another 
case of not being kept in the loop. Despite this, I still fell that TICTU's response was timely and very helphji, as always. 
Thanks again. 


Oi 

From 

Sent: Friday. 

TO^ 




inal Messaoe- 


]OTD) (FBI) 


WQvembef ,04. 2005 5;09 PM 


Cc l D TDT (FBI) 

Subject: RE: DCS-3000 


r[AL) (FBI) 

pTCTCi 


h--3 

fc7 


UHChACgllCICP 

NON-RECORD 


ni. 


'e have to write up weekly accomplishments for the Director's report and feed back like this is greatly 
appreciated. If you have 

any more details that we could put in our write up about how we may have helped that would be awesome. I 
unfortunately am on 

leave Monday, so if you could CC| |on any response he is going to write it up. Tuesday is our 

deadline on ' " ' 

getting sometoing in for the report. I know you’re busy so anything is helpful. 


Thanks, 

I I 


SBITH'ICTU 


Original Message 

Fromi l i (AL) (FBI) 

Se nt: Wednesday. Nove mber 02, 2005 1:01 PM 
To i I (OTD) (FBI) 


S&CF^T 


226 



-UimLAJJIWEIT 

NON-RECORD 



Thank you and great job. The guy they picked up in CT through info provided by the DCS-3000 system is the 
suspect in a double homicide which occurred in rvorthem VT a couple of days ago. You helped save a lot of 
agencies a lot of money and man-hours and, most importantly, you helped take a bad guy off the street. Thanks 
again. 



l-cVC 



Well probably setup in | [ ffice since it's near the win dow, and have to have someone watching the pen in lah 
This should take approximately till lunch time. Afterwards J [ needs a dem onstrat ion of the van integration o j I 

I j T hev^e bui l d ing something for US that should iniSnaoe with the | t >utput of the OCS3000 machines, 

r Ithere to demonstrate it. I was also hoping that they WUia^ee some of 


im h oping to get 
Qlid 


SENSITIVE BUT UNbLAitblFlfcD 


h'lL 




I 1 (OTP) (FBI) 


From: 

Sent: 

To; 

Cc: 

Subject: 






DCS-3000 


I al) (F 

3 er 02 4 

(OTDl 

(FB1)[ 


|AL) {FBt} 

r02, 2005 1:01 PM 
(OTDWFBI) 


] (AL) {FBI){ 


JaL) (FBI) 


lIMLUtSJIPtgD 

NON-RECORP 


I — n 

i nank you and great job. The guy they picked up in CT through info provided by the DCS-3000 system is the suspect 
in a double homicide which occurred in northern VT a'couple of days ago. You helped save a tot of agencies a lot of 
money and man-hours and, most importantly, you helped take a bad guy off the street. Thanks again. 


Albany Divisiori 



h2 

b6 

b:c 


u t i fimiOo i T i iiP 


I I fOTD) (FBI) 


From; 

Sent: 

To: 

Cc; 

Subject: 


Tuesday. 






lOTD) (FBI) 

^er 01.2 00512:35 PM 
K OTO) (FB)|_ 


3>TD) (FBI);Q 


(l-tilj 

FW; ET Telephone Interviews 


bo 

b-C 


SENSITIVE BUTiiMCU>iS«H6& 
NON^ECORD 


I (OTD) (FBlJ 
loTDHFBp J 



]0TD) 


Gentlemen, |. 
i contacted 


following contaci numoei 


md h e advised he is available for a t elephone interview from 13:30 - 16.30. 

: 70:i | 70 ^ jp hanks for getting these interviews done 


He provided the 
on short notice. 
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Or fainal M 

From:^^^ 

Sent: Monday 

Subject; ET ~ 


JfOTD^ (FBI) 

, October 31, 2005 3:29 PC 

l^'n TowFBnf 

3oTD) (FBI)J 

^I^hone Interviews— “ 


~^ co; 

OTD) (FBI); 



|(OTD) (FBI) 
O) (FBI) 


NON-RECORD 


Gentlemen, __ 

Due to the short deadline (Thursday), 1 have askeJ__to put together some questions and contact the below listed 
applicants for a telephone interview. I have already with two of them to secure a time-frame when they can be 
interviewed tomorrow. In speaking with Human Resources, any numbeiLaLauestions can be asked as tong as everyone is 
asked the same questions We are to handle three of the below; p roup will interview the rest. 

FINAL APPLICANTS 

fexpectinq a call Tuesday 13:00 - 16:00 (will be in all day and has interviewed with TRU): 

had T5-5CI clearance ^ a , 

Texpecting a call Tuesday 07:00 - 16:00 (preferably after 13:00); has 5 clearance 
~ lleft message at residence (no answer at work; needs follow-up) 

E iub'3uuu team to arrange a telephone interview (we are welcomed to participate) 

DCS-3000 team to arrange an in-person interview at the Academy (we are welcomed to participate) 
CS-3000 team interviewed him this afternoon (a DCS-3000.team selection) 


SENSITIVE BUT UWCLAi>i>ll ICg 


[OTD 


From; 

Sent: 

To: 


Subject: 


l OTDI (FBI) 

Monday. October 31, 2005 3:29 PM 
I ' ~ y l (OTD) (FBI):| 

I I (OTD) (FBI)J 

(FBI) 

ET Telephone Interviews 


lOTDHFBI) 


(OTD) (FBI); 


Gentlemen. __ 

Due to the short deadline (Thursday), t have asked | | to put together some questions and contact the below listed 
applicants for a telephone interview. I have already spS!^ with two of them to secure a time-frame when they can be 
interviewed tomorrow. In speaking with Human Resources, any numberof^estions can be asked as long as everyone is 
asked the same questions. We are to handle three of the beiowj [group will interview the rest. 


FINAL APPLICANTS 


axpecting a call Tuesday 13:00 - 16:00 (wilt be in all day and has interviewed with TRU); 


^^^^^^^^jexgectinga call Tuesday 07:00 - 16:00 (preferably after 13:00); has S clearance 

|left message at residence (no answer at work; needs follow-up) 
3tS-3tfULi tearri to arrangB'a'lllephone interview (vre are welcomed to participate) 

- DCS-3000 team to arrange an in-person interview at the Academy (vire are welcomed to participate) 
5CS-3000 team interviewed him this afternoon (a DCS-3000 team selection) 


ENSITIVE BUTi 


OTD) (FBI 


From: 

Sent: 

To: 

Subject: 


l(HO) (FBI) 

ar 34. 2005 4:20 PM 
^OTD) (FBI) 


UH(LUtSSIFILT3 

NON-RECORD 




In your copious free time and if you have it rBadi]^_mrailable_coujd^oj^^ some info re the protocal for setting up 
the various vendors in the DCS. I believe that onijj Require information in the Case ID block 

when setting up a pen register. 

Additionally, can we provision our target on our DCS prior to the phone company provisioning it in their system without 
locking the system? 


We are trying to train the newbies and would like to have some correct cheat sheets for them to work off of. 


230 


t:. 

t^7C 


(OTD) (FBI) 


From: 

Sent: 

To: 

Subject: 


I (FBI) 

I r OTD> (FBI) j “I 

nfe; CALEA data fields {A few questions) 


«N6W8&!C|ia 

NON-RECORD 


Will the content of the two Warrant IDs the same {maybe truncated)? Are the times referenced to a time zone? And last 
what does the cr_ <date or time> stand for? 

Ori ginal Message 

From: I (FBI) 

Sent: Friday, October 21 , 2005 5 ; 16 PM 
To.;^^~r^^ 3 [OTD) (FBI) 

Cc i I f OTD) (FBI) 

Subject: CALEA data fields 


UWSLftSSIFIED 

NON-RECOiro 


b^i 

h'.’c 


Attached is the CALEA data set fieldsJhgyhg_22£fiU^JllJliSlLliIl!2SJL^^^^^i]££® S'® st least 3 new fields in 

addition to this those in the attachmet, {i. ej ^^ l and MSC call number) that 

we are working on integrating into the DCS 3000. I ake a look at it and see it they make sense. 


h2 

fc'VF, 



PHSLACSinCD 


"OWOtaAftSIFI^ 


231 

S^ET 


From: 

Sent: 

To: 

Subject: 


b7r 


» ifQTDt (FBI] 

Frklav. October 21. 20 05 5:18 PM 
■ ■ (OTD) (FBI) 


RE; CALEA data fields 


UM0LA09 IFIBP 

NON-RECORD 


I don’t think it's complete. Where's the cell site info? 


From:l^ 

](OTD) (FBI) 

Sent: Friday. October 21 

^2005 5:17 PM 

To|— L™“ 

^^TD) (FBI) 

Subject: FW; CALEA data fields 

NON-RECORD 


— Oriainal Messaoe-*-- 


From:l 

“loTD) (FBI) 

Sent: Friday, October 21, 2005 5: 16 PM 

TOI^ 

IfOTD) (FBI) 

CcJ 

□(OTD) (FBI) 


Subject: CALEA data fields 


nni I itsuii ihu- 

NON-RECORD 



Attached is the CAL^ data set fie!dsJhaUhe^CS_^jts_oi£for^j£lM are at ieast 3 new fields p 

addition to this those in the attachmet fi. a in d MSC call number) that ‘ " 

we are working on integrating into the DCS 3000 Take a look at it and see if they make sense. 




SE^T 


232 


U NgLAQO l Pt eP 


HED 



[ZZ 

From: 

Sent: 

To: 

Subject: 


lOTD) (FBI) 

I I (OTD) (FBI) 

hridav. uctoper ^A. :^ tmh AM 
I I f OTn\ fPBIvl 

FW: DCS 3000 Client fo | 


loTD) (FBI) 


U N OLAOG i r ifiP 

NON-RECORD 


Fro j i fLftl (FBI) 

Sent: Thursday, October 13, 2005 11:25 AM 
To: l TQTD)(FBn 

Subject! DCS 3000 Client fo i I 


bTH! 


u we LAao i r i cD 

NON-RECORD 


^1 an Xiting to request a DCS 3000 Client foP 

CMP, I , '■ 

Please ship it directiy to I RA at: 


It will be located approximately ^]feet from th 


FBI , , 

Attn: I 

One World Trade Center 
Suite 1500 

I nn p Raarh CAQ flR:!'! 

562^ r 


}^~-C 


When it arrives I will receive it in PMA for inventory purposes. 
Thanks for all y^nr hatn 
I [cell: 31t j I 


-b2 

b"^F. 


OWCLAOOinCP 




SEQM 
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From: 

Sent: -i- 

To: J. 7 C 

Cc: 

Subject: 


I SecD){CQN) 

eanesaaiL 2005 

I fSecDi f FBliJ 
I TOTD) (FBI)J 
i: lasKhoroe Operations' 



?TD) (FBI) 
|OTD) (FBI) 


SENSITIVE BUI 
NON-RECORD 


Can we arrange a meeting to see what I can do to assist with this request? 


klSSM) 

Quantico Complex 

ri.«i M cifisp rss PSFC MCSE 

(703| I 

.„“l«(l, IBIIBW, urgat out of the way." Thomas Paine 


Aripirv^l . 

From:] ISecD) (FBI) 

Se nt: Wednesday, Octo ber 12, 2005 7:52 AM 
To ! I . (OTP ) (FBI) 

Cc i l OTDt (FBn i 

Subject: RE: Task Force Operations 


rOTD) (FBI); 


|SecD)(CON) 


SENSITIVE BUI 
NON-RECORD 


□ 


I'm no longer the ISSM for Quantico. The interim ISSM is 
on this message. Sony for the delay as I've been out sick foi 


and I've cc'ed him 
ks. 



CSO. Qu3i 
ERF {70Zi 


Origingj_h1^ag^;;;;_^ 

From J l oTDI (FBI) 

Se nt: Thursday. Sep tember 29, 2005 5:34 PM 

Tol ~| ^D) (FBI) 

Cc; 1 | r^) (FB!): ! 

Subject: i ask roi^ Operations 


(OTD) (FBI) 


secMt 


NON-RECORD 



b6 


I I 


me FBI is involved with many TasK Force operations which are in need of our assistance in performing 
CALEA pen registers and cell nh ona ~~Tfiinnticna Wa have recently had a request from the 

Denver Field Office to support th J L ith our DCS 3000 system. The Task 

Force site has a largeLEBLaueoLluesence and is rated for closed storage of Secret information It has 

a iccess but thq |ey is locked away when FBI personnel are not present SS ^ 

nd I visited the SllS'lSSl'UVeek and would like to talk to you about what we can do to support 
rrations. Please let me know if there is a time that we can talk to you about this situation. 

Thanks. 


lb:.; 


SENSITtVE 


SENSITIVE BUT UHOLAQO i riCD 


SENSITIVE BUT 


[ 


From: 

Sent: 

To: 

Cc: hic 

Subject: 


IfOTD) <FBI) 


w 


> SecDt (FBI) 
ednesdav Octnhfir 12 2005 7:52 AM 


(SecD)(COM) I 

RE; Task Force Operations 


](OTD) (FBt)[ 


SENSITIVE BUT-WlOLAOf men 
NON^ECORD 


I — n 

I’m no longer the ISSM for Qiiantico. The interim ISSM is | l and I've cc'ed him on 

this message. Sorry for the delay as I've been out sick for two weeks. 


Obu, uuanji£2i2!21fi!£3L_ 

ERF (7Q3] | I 


Front 


]OTD) {FBI) 


Sen fa Thurgrlav. Sen tember 29, 2005 5:34 PM 
To: 1 (SecD) (FBI) 




s 


T 
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Cc: | I COTD) (FBI); [ 

Subject: Task Force Operations 



yOTO) (FBI) 



be; 

b7C 


SENSITIVE BUT UNLLH33IPIEU 
NON-RECORD 




iie FBI is involved with many Task Force operatio ns which are in need of our assistance in performing 

CALEA pen registers and cell oh ond functions vy e have recently had a request from the 

Denver Field Office to support th^ 


Jtfe 

^wr 


with our DCS 3000 system. The Task 


Force site has a laroe FBt agent p resence and is rated for closed storage of Secret information. It has 
Trijogv access but UieL^___J<ey is locked away when FBI personnel are not present. SSA| 
L___Jand 1 visited the site last week and would like to talk to you about what we can do to sup(fef 
their operations. 

Thanks. 


Please let me know if there is a time that we can talk to you about tois situation. 


b;- 


bvc 


SENSITIVE p i IT LmrrgUkiPi^ 


SENSITIVE BUT UN C b ACC i r i E ^ 


I 

From: 

Sent: 

To: 

Iv 6 
h'lC 


Subject: 


ItOTDXFBII 

[ 


10TD)(C0N) 


nursaav. ucto oer uo. z00 5 10:58 AM 

I ""loTDWFBir 


a-im 








eimwiaura 


IfOTDi fFBliT 


KOTDH FBDt 




(FBI): \~ 

' ' b lU)(FBI): | ^ OTD) (F^ 


-Jf OTDifFBlV 

lOTmfF^U I 


!1otd) 


IIQTD) (FBI); 

3otd) 


Spend Code Descriptions 


Follow Up Flag: 
Due By: 

Flag Status: 


Follow up 

Wednesday, October 12, 2005 12:00 AM 
Flagged 


UHCLMSSIFIhir 

NON-RECORD 


In reviewing the 5pend Plan '5 descriptions witl ^ | it has been determined that FV06 will bring about several 

changes that may not be reflected in the current write up. In order to realign the mission goals/objectives, please 
review the current write ups to ensure that it is aligned with FY06 tasks- 

b7C 

Ex: SBIT should include TMD , DCS-NET, Outreach Conferences, DCS3000 Upgrades. 


S^ET 
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If these items align with mojor tasks 


06, consider including them in the write-up. 


These adjustments will provide o more accurate account in our Spend Plan and will be used ii 
the AD end in my quarterly submission to SftU. 


Unit brief to 


If you should have any questions or concerns, please see me or 




Thanks forgetting the new circuit in. Re your other questions. 


1 . We are still scheduled for October 3. 

2. The only DCS equipment I wouldn't mind help with is the DCS5000. 1 have ordered lines in St Louis and will be 

transferring my FISAs there temporarily so that we don't lose any data, so there is not a big hurry to get my system 
running, and we can physk^ally move the system there, but I wouldn't mind having Raytheon get the stuff running again. 

But this can happen later in October, when things aren't as hectic, as St Louis will be collecting. 

3. I dont know whether or not the T1 cable has been run already. AQC was out but I don't know what all they did. Is it 
any big deal running the cable? If not we can do it 

4. J would love to have rack-mounted OCS3000 if that works out. 


5. Our new office is about 4 miles from the old office. 


Also, FYI. I won1 be here during the mov 


1/30-10/10; BAE annual conference 10/12-18) so if 




I comes out it probably should be after that. 

— Original Message — 

Fromf I (OTD) (FBI) 

Sent: TTOrSOaTTSepiemDSr 15 , 2005 3:33 PM 

H ' (CON) , 

Cci ■ IfOTDl (FBI); I . | (SI) (FBI) 

Subject: RE: Springfield Division Office Move 


li": ir 

unuutJiinEP " 

MON-RECORD 


Hey I I 

Your circuit at the new building is 
circuit IDs: 


Got a few questions for you; 

Are yall still on schedule to move on Oct. 3? Will you need help moving the DCS equipment? Will you need any help 
running the T1 cable to the equipment room? Will you need rack mounted equipment for the new space? About how 
far away is the new office? 

Please let us know how we can help. 

thanks! , 

I I 


Or iginal Message 

From! ! lT 5n (CON) 

Sent: Tuesday, August 16, 2005 2:03 PM 
To: ! If OTD) (FBI) 

Subject: Springfield Division Office Move 



in. 


[ [ tells 


me it was installed to the 2nd floor phone room in slot 5. Here are the 


b2 

bJE 



NON-RECORD 






Just to let you know, we now have a supposedly firm date for our office move, 10/3/05. I think that we will probably 
need dual circuits for a while, keeping our circuit up here until we are online in the new building. The new building 
address is 900 Linton Ave., Springfield, IL, 62703. 


If there's any other info I need to get, please let me know. 

<CZD 


Thanka 


SE(Mt 
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DCSP - Springj 
211 



leld division 
Desk) 

Fax) 

Cell) 




b:;: 

b6 


^iiii;iL*3iiflgD 


UHChA fi filF I B P 


u M e iAQO i nc p 


1 < 0 TD) (FBI) 


From; 

Sent: 

To: 

Cc: 


bi 

l-y 


C 


TFiaav riemeftSBer 

J {OTD) (FBI) 

Rt 


loTDXFBI) 
6 10;46 AM 


JOTD) (FBI) 


4WC^SS10gO 

NON-RECORD 


As you know, the DCS-3000 system is used by all 56 field offices for collection of all CALEA-based pen-register/trap-trace 
intercepts for both criminal and national security investigations. At the end of CY2004, SBIT added a feature to the DCS- 
3000 system that allows us to collect specific performance metrics from each field office's DCS-3000 system. These 
metrics include the number of current intercepts, the intercept types (i.e. Title-50), and the telecom providers. We 
periodically query each DCS-3000 system for this information and populate a metrics database to help us generate 
statistics and forecasts. Here are tiie numbers for 2005: 



This budget analysis shows the direct annual cost of the DCS-3000 system (software and ca 
For CY2005, the cost per intercept (cost per line) for the DCS-3000 system is estimated to b' 
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harriumej ^ 


SETOT 




From: 

Sent: 

To: 

Subject; 



(SF) (FBI) 
h, 2005 2:17 PM 
OTD) (FBI) 


NON-RECORD 


I l has however 

provisioned it for the pen antL_J but needless to say the DCS3000 isn't collecting anything. Is it possible to collect 
based on an IMSI, or does tbe DCS need a ten digit phone number. It is currently in the North ern Calif, market with 
surveillance ID's and passwords available for Southern Calif and the Arizona marke1^__Jias provided three separate 
surveillance id’s and passwords for these markets. I don’t know is the phone is bei ng used o utside of these three markets, 
which may explain why we haven’t collected anything. The agent also has two othe f ^ lines set up in the same 
markets. They are collecting in Northern Calif., because I have them entered in NorTnsnTTTalif If they stop collecting, I 
was going to enter the other surveillance ID and password for the the Southern Calif, market; see if it collected and 
change it to the Arizona ma rket if Southern Calif, didn 't collect Am I going in the right direction with this? Any guidance 
will be appreciated Thanksl 1 
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Fronn: 

Sent: 3 

To: ri 

Cc: 

Subject: 

Importance: 




OTD) (FBI 


I l OTD) (FBI) 

T|iy£gd31L^UflUSL25L2Q25i9:25 AM 
I . fOTP^ (FBI) 

1 ^fQTD^ (FBI) 

FW: Continued FISA troubles 


SECRET , 

RECORd 


Is ttiere anything that can be^donejo_re§2!i£S issues What do I need to do in order to get a resolution. 

Do you believe the issue isl IJne Issues, or DCS-SOOO? 


From ! K KO (OGA) 

2005 7 1 08 PM 

To ) I kC^ (F BD 

cc l i (OTD) (FBI) J 

Subject: Continued FISA troubles 


CKC) (FBI)J 


(KC) (OGA) 


(S) 

SECRET - 

RECORO 


We’re going to need to bypass the latchbox on the primary 
details call activity and line troubles for the past 10 days. 


line. The packet I left for you yesterday (23 August) 



The new problems incurred by the stopgap measure are outweighing those it was designed to overcome. 
Respectfully, 


Kansas City Division 
Wichita, Kansas RA 

FBrxm£_— 

(316 Desk) 

(316; -ax) 


SE[J<T 


Subject: 

Location: 


COOP meeting 

Main Conference Room, ERF 


Start: 

End: 

Show Time As: 


Thu 9/8/2005 2:00 PM 
Thu 9/8/2005 5:00 PM 
Tentative 


Recurrence: 

Meeting Status: 
Required Attendees: 


(none) 

Not yet responded 




LSlUll 








1)TD> fFBIlT 


](01PP)(FBI) 


Meet wittT 

dcsnetL 

DCS-3000 

DCS-5000 

DCS-6000 


re Continuity of Operations (COOP) Pians for: 

he 

b'TC 



D) 


From: 

Sent: 

To: 

Subject: 
Importance: 


JbS 

b-rc 


lOTD) (FBI) 


I l OTDi (FBI) 

Wednesday. August 03 . 2005 1:47 PM 
I r OTD) (FBI) 

FW: COOP Information Requested for OTD Systems - Complete by 8/4/2005 
High 


2.WP0 (20 KB) 


NON-RECORD 


NNOU&SiyEQ. 


bo 

b'/C 


The 3000 is cited on this message... 
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h-’C 


Or iginal Message 

From: ! I fOTD) (FBI) 

Se nt: Friday. July 29. 200S 4:07 PM 
To: l IfQTD ^ (FB!)!" 

, rrr p^ ^FBn:i Tr TODjfA 

I 


fOTD) (FBI) 


inPUFBn: 
]CorDHCON)[ 


1(OTD) ( FBI) ;| 

3 i fSec gT7FBIT 
OTD) fFBn l 
'OTD) fCON) J 


Subject: COOP Information Requested for OTD Systems - Complete by 8/4/2005 

Importance: High 


l (rTD) (FBI);[ 

I^TD) fFBl I 
PTDXCONi J 


] 


1 


] 


OTieutSblRED' 

NON-RECORD t,,, 

h 7 C 


I □ 

YoLtr have systems <EDMS, DCS systems, CART SAN, DITU systems) that may be designated as "Mission Crittcar OTD 
System Managers are requested to provide information about die Continuity Of Operations Plans (COOP) for systems 
designated as mission critical. As noted in the attached EC. infomnation is to be entered at the following FBI intranet 
website by 8/5/2005. 


If your system is mission critical, please provide me with the system name and a copy of your COOP plan and an email 
response to indicate that you have provided the requested information to the website. If your system is not considered 
critical let me know that also. 


You may have a list of OTD systems that are dsignated "Mission Critical" and have or should have COOP plans. Please 
provide this list to me so that the PMO can make sure all appropriate system managers provide the requested info. 


PMO will prepare an EC indicating OTD‘s compliance to the OCIO’s request. 



b2 

h6 

b7c 


Original Message — 

From: CUFFORD, MICHAEL (OTD) (FBI) 

Sent: Friday, July 29, 2005 2:49 PM 

To il r oTDt (FBI) 

Ce;| K^TD) (FBI); DICLEMENTE, ANTHONY P, (OTD) (FBI);| | (OTD) (FBI); THOMAS, 

MAKUJb L. {U(U} {rOL} 

Subject: FW; ACTION download 
Importance: High 

b"?c 
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V y 


SECRET 


13TD) (FBI) 


From: , 

Sent: 

To: 

Subject: 


c 


1 


Tiioeriaiu AiiaiicLQ3 


i 


5)TD) (CON) 


005 10:12AM 
OTD) (FBI) 


hw: uuaauuu i rammg in SF 


SENSITIVE BUT UMUmi>gffTED 
NON-RECORD 


tag,... you’re it! 



O riginal Message 

Prof" * I fOTDVCONI 

S ent; Monday, August 01, 2005 1:15 PM 

Td ' rOTD UCON) ^ ^ ^ 

Cc: I K SF) (CON) i | (OTD) (FBI);| |(OTO) (FBI) 

Subject: DC53000 Training in SF ' 


SENSITIVE 

NON-RECORD 


6 

b7c 


hI I 

I received a message from one of our managers in ttie field rega rding | jexpressing an interest in hosting a future 

DCS3000 class in the San Francisco area. What would be the next step in maxing this happen if it is a possibility? 

Thanks 


I 

"I BAE Systems 

ELSUR Technology Management Unit(ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Investigative Technology Division (ITD) 

54(1 (Desk) 

(Fax) 


b;': 

bG 

b;c 


SE^T 
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9v 


SENSITIVE BUT 


From: 

Sent: 

To: 

Cc: 

Subject: 


T i (OTDHCON) 
^aj^i^iigust01j_2005^^ PM 

IZJOTDHWm 

bfTTconiI 

1 

3000 Training in SF 


tOTD) (FBI); 


ENSITIVE BUT UNeLMSiaffTLO 
3N-RECORD 


I received a message from one of our managers in the field regarding l e xpressing an interest in hosting a future 

DCS3000 class in the San Francisco area. What would be the next step in making this happen if it is a possibility? 


Thanks 


| BAE Systems 

ELSUR Technology Management Unit(ETMU) 
Electronic Surveillance Technology Section (ESTS) 


Investigative Technology Division (ITD) 


(Desk) 


(Fax) 


SENSITIVE BUT UNOtAOO i nC D 


sejbret 




[ 


1 (OTP) (FBI) 


From: 

S«nt: 

To: 

Cc: ih'.'' 


Subject: 




I 


liirs^Fiwmpieii 




](ITD){FBI) 

2005 11 06 AM 

I fOTD) (FBI) ^ 
IfQTDi fFBlf 


TFFIC ^ 

RE: RMS 101411- OWL 


immj 


FBIf 


l»TnuFBIl:l 

|iTD)fFBn: i r mrn 


b,: 


SENSITIVE BUT UWU-AASIFteU 
NON-RECORD 


If thi s] ^ connecting 2 DCS3000 units (and the write ug^fiaojjgjnterpreted two ways) then it would be logical for the 

DCSsODCTwam to provide it. in a brief conversation withf Yesterday, be was also of the opinion that this 

request should have been forwarded to the DCS-3000 team rirst. Again, we went ahead and purchased it on a credit card, 
so this particular request has been covered. 

bs 


O riginal Message 

From I 


To 




£ 


i 


](OTD) (FBI) 


ibjeck: kl: F^MS 1(1141 


rmUFBI) _ 
^3oTD) (FBIi£ 
I?TTD ) (FBI) ~ 
1- OW| I 




I (OTP) (FBn:r 
(FBI) i 


t rrp) (FBI); 
lOTD) (FBI) 


b 


IL 


SENSITIVE BUT UHOLAQOiP l E P 
NON-RECqRP 

b6 

b-^.7 


1 really couldn't say if this will become a common request or not. I can see where t he field may 
want this capability, but from a system (DCS 5000)perspective, we already provide l^^H switches 
which allow them to access the various servers within the DCS 5000 from a single point As for 
the capability to access other systems - particularly UNCLAS systems, I would have to consider 
that a CMP issue. When 1 forwarded the RMS to you, I was not recommending that you provide 
the equipment, but pointing out that it needed to be handled in a timely manner. If the equipment 
is not going to be provided, ttie site needs to be aware so that they can insure that they are in 
compliance with security requirements. 

Hope tiiis helps clarify things. 

Thanx 


(703y 


Orj2ina|_ftessa2e;™- 

Fro m r iTDt (FBI) 

Se nt: Tuesday. lulv 19. 200 5 2:23 PM 
To i K OTD) (FBI) 


seXet 
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ccT 



I I CTTPUEBU 

Subject: RE: RMS 101411' OM 


] (OTD) (FBI>[ 


JUD) (FBI); 


6 

SENSITIVE E l rTiit^ri ‘r*fnrr ’ 

NON-RECORD . ^ 

J-/VE 


We will orderthison behalf of TICTU. Do you expect this to be a one time request or will there be 55 other 
requests fo l P This would seem to be a system specific piece of equipment which would logically be 
handled by TiCTU. 


Can we buy this on your credit card? Is is approximately $200. 


](OTD) (FBI) 


Or iginal Wessaae- 

From; r~ 

Se nt! Tuesday. July 19, 200r 7:5 1 AM 

To:r 

jCcT 


9, 2005 7:5U 

lmi(FBI);L 


kuiUKhPij J ' — 

^10TD)(CON)| 
](bTD) (CON)*" 


Subject: RMS 1014U- OM 
Importance; High 


1mt» fcoN) 


imp) (CON);[ 


5 


OTD) (FBI)^ 


□(OTD) (FBI. 

30 P) (CON);| 

|(OTD)(CON); 


I 


SENSITIVE BUT UtmiASetPtEO 
NON4RECORD 


b.:: 

b7E 


I passed this RMS to your group. 

This should be handled as expeditiously as possible. 

RMS 101411 -Omaha Division is requesting j b witch Vievi/ I i 

I p fter r eviewing a communication which indicated it is the only approve d t o be 
used. ThiJ ( will connect to both the FISA and Criminal DCSSOOO's and will replace the 
existin g [ which is made by Belkin. Thank You! 


SENSITIVE BUT UHULAJJIPieD 






I really couldn't say if this will become a common request or not I can see w here the field may want 
this capability, but from a system {DCS 5000) perspective, we already provid f^ b witches which 
allow them to access the various servers within the DCS 5000 from a single point. As for the 
capability to access other systems - particularly UNCLAS systems, I would have to consider that a 
CMP issue. When I fonwarded the RMS to you, I was not recommending that you provide the 
equipment, but pointing out that it needed to be handled in a timely manner. If the equipment is not 
going to be provided, the site needs to be aware so that they can insure that diey are in compliance 
with security requirements. 

bb 

Hope this helps clarify things, 

Thanx 



bo 

b;C 



□zi 

W e will ord er this on behalf of TICTU. Do you expect this to be a one time request or will there be 55 other requests 
fol I This would seem to be a system specific piece of equipment which would logically be handled by TICTU. 

[ZZ] 

Can we buy this on your credit card? Is Is approximately $200. 


bo 


— -O riginal Message 

From 


SentiTuSday, July i9, 2(J05 /:51 AM 


3rifl 

Ih 

a 

^ *" >OTD^ (FBIVI 


](OTD) (FBI) 
7:51AM 
IflTD) fFBn i 

IrOMtfFRTH 


b^E 


I [ OTP) (CON) 

bUDJMEfRMS 101411- OM 
Importance: High 


]OTD)(CON)[ 




irrp ) (CON) _ 
^(OM)(FBli 


JOTD) (FBI);[ 


iOlDYl 



Ifbi£ 


yN) | 

JOTD)(CON);[ 


SENStTIVE BUT tfHilLAl^Sn lED 
NON-RECORD 


-b C 


I passed this RMS to your group. 

This should be handled as expeditiously as possible. 


Ditrision is requesting j [ Switch View ! 

5 viewing a communication which indicated it is the only approve d I to be used - This 
ill connect to both the FISA and Criminal DCSSOOO's and will replace the existing 


RMS 101411 -Omaha 
after re viewing a communication 


which IS made by Belkin. Thank You! 




SENSITIVE BUTWWhA&SlElED 


SENSITIVE BUT i 


SENSITIVE BUT UNITUtSSIEIBP 
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se)^et 



order this on behalf of TICTU. Do you expectthis tobeaone time requestorwill there be 55 other requests for 
This would seem to be a system specific piece of equipment which would logically be handled by TICTU. 



Can we buy this on your credit card? Is is approximately $200, 

bG 




b 

b 


I passed this RMS to your group. 

This should be handl^ as expediSousIy as possible. 


RMS 101411 -Omaha Division is requesting a | { Switch Viev| 
after re viewing a communication which indicated it is the only approvea l h o oe use 
I vHI connect to both the FISA and Criminal DCSSOOO's and will replace the existin 
which is made by Belkin. Thank You! 




From: 

Sent: ^ 5 

To; C:,7C 

Subject: 


C 


](SD) (FBI) 


Tuesday. July 19. 2005 12:01 PM 


THANKS FOR YOUR 


FBnr 

^SUP 


t OTDl (FBt):[ 
](OTD) (FBI) 


PORT 


i 


SblpperGate.rtf (23 
KB) 

SENSITIVE BUT UHCLA33 I P I E P 

NON-RECORD 


Thought you might find the attached article inte resting. The investigation involved the intercep t, on 
VoiceBox and DCS3000, of numerous phones, P T vith the 

collection of tens of thousands of sessions over an almost two year period. 




Thank you. This could not have happen without you. 


SENSITIVE F IIIT I IHI I IMIllInrTT 


[ 


Iiotdmfbi) 


From: 

Sent: 

To: 

Subject: 


lTj riTiTi F^TTWilTI ETS i 


Afltran ibubuu 




SF) (FBI) 
5:22 PM , 
OTD) (FBI}[ 


](OTD) (FBI) 


NON-RECORD 



Didn't know who to specifically address this to, so did the shotgun method. 


At our co-location in San Francisco wit JUte haveJoi£AdtrBn^SU_600^^ 


Will this mean we will need twelve additional Adtran DSU 5600's to accommodate the TSU 600 and another Cisco 2610 




SElfc 


2S2 




router? Or, is this where we try to create the 9.6 DDS fro H l as the need arises. Some of the DDS circuits will be - 
permanent, but others will be changed as different targets come up. 

will be going to ERF for the DCS3000 training next week and will try to find some time to get your input 

I desperately need to be able td^_^^_^_^_|into the VB system in Oakland. We hgvs_bottiJ^ rooms running 
in SF; Oakland is running one line ana trying to go up on six more. Can you give me a call l k hen you get a 

chance. Thanks for helping our on Saturday. Sunday, they overheard the subject organizing a group to ao some killings 
and had to arrest him. I don't think they would of intercepted those calls if you hadn’t helped. 


TDl (FBI 


From: 

Sent: 

To: 

Subject: 


DCS3000 


|[HN) (FBI) 

15 3:20 PM 
](OTD) (FBI) 


Last week I emailedL^^J'egarding not being able to access the DCS3000 from my computer anymore. I used to be able 
to have a direct connection into the system in the server room that you set up. I can't get into an^hing anymore. Can you 
still get into our system? If so, is there a way you can look at it to see why I can’t get in anymore? Also, there is nothing 
listed when you go into the start menu. It Just lists Windows catalog and Windows update. What happened to all the other 
programs it used to list? There is no rush, but when you have time could you please check on this for me? 


Thanks! 

^Aloha^ 


U NCLAaS IFtgP 


OTD) (FBI 


From: 

Sent: 

To: 


JOTD) (FBI) 

B 8:09 AM , 

l(OTD) (OGA); CLIFFORD, MICHAEL (OTD) (FBI); 


Subject: 


I HfOTDt 

(OTD) (FBI) 

Contract Review Board July 14th 


|(OTD) (FBI);| 


SENSITIVE BUT I 
NON-RECORD 


There is a Contract Review Board scheduled for July 14, 2005 at 2:30pm. 

and 


represent TICTU 


will be 




SE^^ET 

The contract is with Booz Allen and Hamilton (BAH) for the amount of 
$1,497,736.92. 


The DCS-3000 software suite is the Bureau's primary CALEA pen register 
collection application and is maintained by BAH in accordance to Bureau 
personnel direction, BAH has been active in the development of this CALEA 
software interface for more than seven years. 


TICTU is asking for Logistical support in training and liaison. The 
need for personnel to tactically implement court -authorized ELSUR and react 
in exigent circumstances to threats of life is a necessity that requires a 
significant amount of training and liaison. This requires industry leaders 
with unique abilities and backgrounds. Also, TICTU requires support with 
continue software development pertaining to the FBI's ELSUR capabilities. 
The continuing emergence of new telecommunications technologies requires a 
unique ability to design and implement solutions at accelerated rates. The 
lack of a quick reaction capability to adapt ELSUR techniques within the 
FBI may result in significant vulnerability and exploitation opportunities 
to enemies of the United States, 


A requisition was submitted for $2,100,000.00, Due to the lack of time on 
the existing contract, an interim purchase order for the period of 
performance of May 1, 2005 - July 31, 2005, was put into place for the 
amount of $602,263.08. The money for the interim purchase order was taken 
from the original requisition. 
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From; 

Sent: 1 . 

To: 

Cc: 

Subject: 


-nriau Jiii\/ns ^ PM 

IfnTry (FBI) 


^|OTp) (FBI) 


OTD) (FBI) 


FISA Intercept Problems 07/01 o 07/08/2005 0700 hrs. 


Importance: High 


^ (S) 

etf.jpg (660 KB) 



b1 


Did you contacj yesterday? Can you echo your discussion w[ 


h 


the guys beksw? 




CZI 

S^ltLE 




— Ol iqinal Message 

From 


{ 






. . (OGA) 

aB?b:18AM 

^(OTO) (FBI)j_ 
^(KC) (OGA) 


]{KC) (FBI);[ 


UkC) (CON); 


Subject; FISA Intercept Prd)lems 07/01 o 07/08/2005 0700 hrs. 


(S) 


bl 



RECOR 


b;;; 

b7E 


Attached is a list of 27 tro ubie caiis o ccurring between 07/01/2005 and 07/08/2005 (atOTOOJ^), The list is not entirely 
representative because thi I failed over the Holiday weekend and we lost all | [ Intercepts between 07/03/05 

15:56:08 and 07/06/05 at aPprOT. 'I BOO hrs. Moreover, the DCS3000 crashed over tne weekend as well; consequently we 
lost all our Pen data for both cellular phones from 07/01 to 07/06. 

If you need any clarification of the comments, please don't hesitate to contact me. 

I I If you would, give me a call when you get a chance so that we can eliminate th I I t didn’t remedy 

any ot tne prooiems anyway so let's remove that weakpoint in the configuration. (I've forgotten the necessary TIU setting 
changes.) 

Respectfully, [i"-' 


Ih i.S 
b7C 


seI^et 
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FBl/jTTF, Wichrta 
Kansas City Div^ion 
(3161 ^ 

(316 0«sK 

(316 Fax 


seS^t 


DECLASSIR 


'•/fMMJt^U d.rrnrs 


tfon Guide G*3. da 


nee Inv^tiqatlons 



From: 

Sent: 

To: 

Subject; 


l(SA) (FBI) 

i 2Q05 12:1SPM 

I fOTD^ (FBI) 

I question 


NON-RECORD 


Thanks, we'll leave It as is. 

From ! K OTD) (FBI) 

Se nt: Friday, July 08, 2005 10: 43 AM 
To l ~fc A) (FBI) 

Subject: RE: DCS5000 question 


>M-RECORD 


The Time Difference pick in the DCS 3000 pertains to the order expiration times. Since the DCS 3000 looks at the b2 
warrant database stop * b ; n; 

date and time to know \A^en to stop recieving data we need to make sure that we have taken into account the GMT 
time difference so we 
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SE 



bG 

t:/'C 


Or [Qinal Message 

From: 

¥• ThiircHa\j 




Subject: DCS3000 question 


l (SA) (FBI) 
i 2005 2:50 PM 
loTD) (FBI) 


NON-RECORD 


Hr. '/fi 1 a»or got tha Zope difference undei j I configure? We've been leavin d 

I a case agent asked me about that this morning, but was satisfied when I told him it was 
GMT. He said he could live with that. 


] 


UNCUSiiEjii 


L>N«MS&|E£[L 


[ 


From; bt: 

Sent; h. -?c 

To; 

Cc: 

Subject: 


ikoTD) (FBI) 

[ 

I 


h.iw 


% 


](HN) 


(FBI) 


2005 2:54 PM 
IQIDHCON) 


kOTD) (FBI) 


^lona 


NON-RECORD 


Aloh: 


Hope you enjoyed your short trip here! I was wondering If you could help me out. I cant seem to get into the DCS3000 
from my computer at my desk, I know you had saidjhgJ_^ouJ^t the connec tion and ma de the same login and password, 
but I can't seem to get in. I usually go through thd land kjg In witl| |and the password. It won't let me 

in anymore. Could you please let me know if I arn ddiDg S&M^fning wrong, i— — i 



Are you still able to|_^_^^_|into tills computer? 
Thanks! 


S^ET 
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UIIICLHJA I P I» 


I 

From: 

Sent: 

To: 

Subject; 


loTD) (FBI) 

I 1 (SA) (FBI) 

iniir^av .liiliTTFr vniip. .Tfin pM 

I PTD^ (FBI) 

DCS3000 question 


OtieLADGinSO. 

NON-RECORD 


Do you ever set the Tima Zone difference unde 
I i A case agent asfced me aboTT 

said he could live with that 


o 

3ut mat I 


onfigure? We've been leaving 

this morning, but was satisfie tfWfflSfl I Mlfl fllW (I W35 UM I 


TTS" 




U UCkAOS IP rED 


I [OTDjfFBF) 

From: I If OTDWFBh 

Sent: 1-6 Ihursdav. July 07. 2005 2:14 PM 

To: b7c ^ 

Cc; I ^ |5tD) (FBI);| |oTD) (FB)) 

Subject: Kb: Htione Kecords 


SENSITIVE BUT UHCLASS i r iBD 
NON.RECQRD 


OTD met last week about the T & A issue vou have and the^balUias^been bounce primarily to EDWIS with TlCTU 
supportirrg. I am deferring this to|^^^_^^^jEDMS) anc j [ TlCTU, DCS-3000) . 


IZZI 


hlc 


Original Message 

From? 


Oriaii 

itiTC 


JWF) (FBI) 

Se nt; Tuesday. Iiilv ns 7nns i ‘4fi pm 

To ! KCTO) (CON)J [W) (FBl)^ 

(O' 

Cc 



1 

1 





](otd)(fbi)£ 


(Cyb) (F^i)n 


Subject: RE: Rhone Records 


tVD) (CON) 


]CTD) (FBI); HQ*DIV13-EOPS_TECh£ 


SENsnrivE buiTMi i m iiii li n 
NON-RECORD 


I am open aff week that week. 
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Q 




b^C 


bo 
b'^' C 




Original Message--— 

From^ 


JCTD) (CON) 


[ 


Sent: Tuesday. July 05. 2QQ5 12:17 PM 

-rnl fwn fFRtf 


c 




jOTD) (FBI); r 


JCyD) (FBH 


(CTDjCFBli; 


Subject: RE: Phone Records 


bo 

b7v 




Tcwf) (F8I)[ 


}0TD) (FBI); 


JyD) (CON) 


(CTD) (FBI); HQ-DIV13-EOPS_TECH; 


SENSITIVE BUT UK fl LAOG i r iBP 
NON-RECORD 

b^; 
lb VC 


I 1 

^ at CyD/STAS has experience in handling this sort of problem of "standardizing" disparate data types. I 
would suggest that we go ahead and set up a time for us all to get together at WFO to get a first-hand view of the 
problem. Please propose a time for a meeting. The week of the July 1 1 looks open to me except for Wednesday. 
If we can get schedules coordinated for at least one representative from CXS, STAS, OTD, and WFO, we can 
get this rolling. 

Thanks, 


From: ! I fOvDI (CON) 

Se nt: Tuesday. July 0 5, 2005 11:23 AM 

To :i K rrm (con) 

Subject: RE: Phone Records 


SENSITIVE 

NON-RECORD 


b.7 

STAS has performed this type of work in the last 12 mon^s, and I feel we can easily take foe formats and turn ' 
them into a "standard" format. 



SE^T 
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SFbfkr 


Would love to meet with you, and/o| 
effort with your help ... 


lo take a look at the various file formats and then tee up an R&D 


Let me know your thoughts 


Thanks 




— O riginal Message — 

From i \ VJf) (FBI) 

Se nt: Thursday. Jun e 30, 2005 11 :07 AM 
T oi If OD) fCON)i: 

rOTPI fFBnri: 


Ccf 


I(WF) (FBlJ 


Subject: RE: Phone Records 


3cTD)(FBI)I 




JOTD) (FBI) 


JCTD) (FBI); HQ-DIV13-EOPS_TECH 


SENSITIVE BUT UNeLASS i r i C P 
NON-RECORD 


A short list would include: 


1 . Provide automated uploading frwn DCS-3000 to telephone applications. 


3. Provide automated uploading from the RedWolf collection system to telephone applications, b 2 

lb V F. 


O rkainal Message — - - 

From| KCTD) (CON) 

Se trt; W6dri^av. JUAIzO. 20 05 4:45 PM 
T ol . f ^WF) f FBI) 

poy (FBI)£__ 


ject: Phone Records 


](CTO) (FBI); HQ-DIV13-EOPS_TECH 


k, 

b 


SENSITIVE 
NON-RECORD 


] 


fcfi kfiH me to contact you regarding an issue of transferring massive amounts of DNR data 
into l l ^an you send me an email with details of the issues? Anything you can provide will be 

helpTui, 

bb 

Thanks, 


3E(>^T 
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bo 

"OBILLAaaiRED b;c 


26L 

S&?!feT 






From: 

Sent: 

To: 


I 

il: 


Subject: 


S^ET 

1 (OTP) (FBI) 

I ^ (OTD) (FBI) 

Thursday, June 30. 2005 1: 44 PM _ 

I ~lOTD^ rFBni 




l uiUrTTBTT 

RAI: Phone Records 


rOTD) (FBI) 


r 


J(OTD) (FBI); 


I 

pTD) (FBI); 


SENSITIVE BUT Ut l OLAOO i rtED 
NON-RECORD 


More T&A info... 


O TD/ESTS/TIC TU 
70^ Iw) 

20^ ^C) 


Front, 


-O riginal Message 


JWF) (FBI) 


Se nt! Thursday. Jun e 30, 2005 1 1:07 AM 

To i HTctdi frO Nir^ 

fF Bjl I fWF^l 1[MJ_ 

Cc j I TD) (FBI)4__ 

Suqeci: Kt: j^none Kecords 




JWF) (FBI)[ 


](07D) (FBI)[ 


](CTD) (FBI); HQ-OIV13-EOPS_TECH 



SENSITIVE BUT-WtCLASaiEIED 
NON-RECORD 


A short list would include: 

1 Provide automated uploading from DCS-3000 to telephone applications. 


I' 

il 


3. Provide automated uploading from the Red Wolf collection system to telephone applications. 


h7r'. 


— OrIginaUtewage;™ 

Frotn l I CTD) (OON) 

se nt: Wednesday. June 29. 2 005 4:45 PM 

a 

Subject: Phone Records 


(WF) (F£ 

(FBDr 


JCTD) (FBI); HQ-DlV13-EOPS_TECH 




SENSmVE BUT-UMCLACSIHEO 
NON-RECORD 


262 


Ifv If) 

f/C 




b sked me to contact you regarding an issue of transferring massive amounts of DNR data into 
you send me an email with details of the issues? Anything you can provide will be helpful. 


Thanks, 


SENSITIVE BUT UH e LASai ri E D 


SENSITIVE BUT UMCLAB 6I F I ED 


SENSITIVE BUT UHIi: hAO Slf IIUCT 


I 


From: 

Sent: 

To: 

Cc: 

Subject: 


he 

h'7C 


](OTD) (FBI) 

I I ( ITODKCON) 

'iBiiHiJiiiu .iimu .uf 10:05 AM 

1 IfQ TD^ (FBI) 

\ l (ITOD) (FBI) 

Tw: rormat 


y u s LAQO i n efr 

NON-RECORD 


Could you please send me a sample file for the full file format for the DCS3000 which will include the fields that we 
currently aren’t getting. I do have some questions, but seeing the data on the file may answer some of them. Can't really 
modify the TA software to handle the full tile without an example to use. 


6 


OrigiaaUJggggg;— 

From I U TODtfOJN) 

fi gnt: Tinawtav liint* ^iT ^nn^; 10:48 AM 

T d ■ IfOTD) (FBI) 

Subject: RE: DCSPC format 


NON-RECORD 


S 5 fe<ET 
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Thanks for the format. Do you have a sample file that you can send us to use in modifying the upload program? Was 
asked to confirm if the lAPSystemldenty is what we are calling the Switch ID. Do have some other questions, but they 
may be answered by seeing the data in the file. If not, I'll get back to you. 




Original Message 

- \rm\ (FBI) 

Sent: Friday. June 03. 2QQ5 6:28 PM 

To: i r rOD) (FBI) 

Subject: DCSPC format 


NON-RECORD 



ched is the DCS 3000 output specifications for the DCSPC header. 


'1:^ 6 
b7C 


ttrini ^rgiRED 




u ii cu;efi i g igD 


UMeLA09tPt» 



SE^T 


From: ■ (FBI) 

Sent; Vr, Wednasdav Jurift ?? 7005 4 28 PM 

To: £ I ^H fOTP) (FBI) 

Subject: ' DCS3000 Network useforVoiceBox 


SENSITIVE BUT UHQLikJilFII'D 
MON-RECORD 


Has a decision been made as to whether the DCS3000 network can be made available for remote access to VoiceBox 
locations? 


SENSITIVE BUT UNLLASj>IFIBl> 


bTD) (FBI) 

From: I t lTODKCON) bG 

Sent: Vue^av. June ;;i. 200 5 10:46 am b/c 

To: I _ _ I tOTPi (FBI) 

Subject; RE; DCSPC format 


UWLLMAAIFietT 

NON-RECORD 


Thanks for the format. Do you have a sample file that you can send us to use in modifying the upload program? Was 
asked to confirm if the lAPSystemldenty is what we are calling the Switch ID. Do have some other questions, but they 
may be answered by seeing the data in the file If not, I'll get back to you. 



— O rioinal Message — 

From: l P TDt (FBI) 

Se nt: Friday. June 03. 20 05 6:28 PM 
To ! I (ITOD) (FBI) 

Subject; DCSPC format 


TffJLutJuiiacD 

NON-RECORD 


to (b 



ched is the DCS 3000 output specifications for the DCSPC header. 


[ 
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Mi 


S 


:us 


From: 

Sent: 

To; 

Subject: 


m 


IS P) (FBI) 
2qETT34 : 


PM 


]OTD) (FBI) 


SENSITIVE p ur ACftiPicn 
NON-RECORD 


Just checking as to whether any progress has been made on allowing us to use the DCS3000 network to remotely 
communicate with our VoiceBox systems. 


SENSITIVE BUTimn ftnnnrrr 


I |{OTDHFBI) 


From: 

Sent; 

To: 

Cc: 



Subject: 


I l(OTD) (FBI) 

Vriday, June PM 

CLIFFORH Miri-I AFI (OTD) (fRI) 

□dip) (FBOif 
JOTD) (FI 

Tmer 


OTD) (FBIJ 


J VoIP Intercept 


SENSITIVE E tifTiftini nminTT 
NON-RECORD 


JOTD) (FBI){ 


]OTD) (FBI); 


Mr. Clifford, 

I am pleased to report that TIC TU recently assisted the Buffalo and New York City field divisions with FISA intercepts 
of two separat e l/olP telep hony subscribers. Also, TICTU recently assisted the New York City office wito a ^^2 

pen-register intercept of j [ VoIP telephony subscriber. fc ' r; 



s^4t 

These are the first real-time VoIP intercepts condi 
office expects to conduct more intercepts with" 


^-like intercept techniques. The New York 
in the near future. 


OTD) (F 




From: 

Sent; 

To: 

Subject: 



|HO) {FBI) 
05 4:39 PM 
OTD) (FBI) 


TechTool.gif (2 KB) 


NON-RECORD 


IVe tried to send the RMS for ttie DCS 3000. Hopefully it got there. 
Let nne know if it didn’t and I'll try again. 



From: 

Sent: 

To; 

Subject: 


Centennial 


—kSJ) (FBI) 

i 5 3:24 PM 
[OTD) (FBI) 


tedi.glf (951 B) 


NON-RECORD 


UNCLASSIFIED 


I dont recall if I gave you this info... Anyway, the POTS line ^ | called 

the number to test and the modem picked up (after I got them to plug it in the correct port). Anyway, 
give me a call when you get a chance so that we can do the testing. 


PS; I just sent an RMS (100081) for a loaner DCS-3000 box to be used with the 


n the wire b 


L J 


S^ET 

room for the "big case". We should go up by the end of the week.. 1 know you guys dont have 
anything else to do, so whenever you can ship one out will be mor e than apprec iated ;-) (Even if we ^ 
dont have thd Junninq, at least they can manually check the| Iilthough that might be ^ 

captured on ^ ^ 




Greetings Gentlemen, 

1 hope you had a peaceful Memorial Day Weekend. 

I have attached my list of Switch addresses. Could you please review for correctness? I know you are constantly 
updating and changing switch addresses. 


I did not have anything loaded in the BQ Voice Box foi 


did input both and was successful in pinging both. 


b'>c 


nd I was not sure if th< 


lY vtras still good. I 


From: 

$ent: 

To: 

Cc: 

Subject; 




h6 

■b7,: 






](NY) (FBI) 




J(OTD) (FBI) 






RE: C-35 consensual audio intercept at BQ 


|NY) (FBI) 


](NY) 


SENSITIVE BUT ut te ukao i nc D 
NON-RECORD 


(S) 


Greetings. 

I tiave set up Voice Box at BQ foi^ 


two consehsiiats foi 


c 


]Wireless is programmed into VB channel 5 with a ring down of| 
]is programmed into VB channel 1 with a ring down ot^ 

I 


Thank vou. 


he 

h'!C 


nripinal Mpcsaae — - 

From: I | (NY) (FBI) 

t: Mt 


I 


Se nt: Saturday, May 55, 2005 8 :26 AM 

Toa rNY)(F6I);| 

jNY)(HJIj J ‘ 

: RE: C'35 consc 


]nY) (FBI)£ 


Subject: 


^ consensual audio intercept at BQ 


hi 


](NY) (FBI); 


■b2 

b'/K 



SENSITtVE BUT UMOLAOO i nC D 
NON-RECORD 


Thanks, [ 



On Tues morning. I'll speak lo l r egarding the dynamics of how the CDC is sent to BQ, so I'll understand it better, ii-. ; r 
I here's the info at the CMP for your records or as an aid in troubleshooting; 


When we receive the ring-down number from you tor the CCC, we’ll fax the request 


'i 
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Fn>m:| |(NY) (FBI) 

Se nt: Friday. Mav 27. 200 5 3:20 P M 

/ t^V^^FBIvL 

W YUFBII: ! I (NY) (FBI) 

Subject: C-35 consensual audio interrept at BQ 


4Y) (FBI)J 


(NY) (FBI) 


SENSITIVE BUI 
NON-RECORD 


Greetings, " 

This is to confirm numerous telcal betweer J f nvself and ERF. 

has provided the CMP with a Court Order for a consensual T-3 type intercept. This will be the first 


I m I I W M M-a f! I* thm \ I W-1 ^ 




At least we are breaking new ground on a consensual set for 90 days. Plenty of time to work out the bugs. 
Please let me know if you have any other ideas or suggestions. 


lii^i 


SENSITIVE BUT 











From: 

Sent: 

To: 

Subject: 



tech.gif (95 IB) 


U tl OLASa i Fl ED 


NON-RECORD 


n 


I told you already the outcome of the kidnapping: released (but beat-up) victim this morning. 

Re the svMtch numbei^. I dont really know what the field with values 1 or 2 is. However, I was able 
to !D the tower manually based on th at list (the tower identifier is unique regardless of the 1 or 2). 
^The on|v thing is that I couldnt tell th a . - ^ 

When I return I can do some more chec king with i I (BTW, I spoke t < I this morning 

- still no #. I asked her to caltl Iwhen she has it so that he can relay it to you). 


From; ! I . (OTD) (FBI) 

Sent: Monday, May 16, 2005 3:48 PM 


SECRET 


Subject: RE: Hola 


4iUCMM!He» 

MON-RECORD 


How did the emergency pen go?| lasked me about the switch identification issue to see if 

[ into the| 


we can 
resolve how to integrate th^ 


] Let me know. 


F. 


— OriglQsLtiSSSflS;;;;^— 

Fronl ■ _ (FB!) 


Se nt: Friday, May 13. 20 05 8:35 PM 
To t l (OTD) (FBI) 

Subject: Hoia 


ti-j 6 

b7C 


IWCLASSICIEP 

NON-RECORD 


Hey sehor, 

I just created a veryf 


J 


(since I dont think anyone else here knows what a ping is.. .s o that might make it easier to run). 
Anyway, i created it in the DCS 3000 directory and is called] pf you get a 

chance, take a look at it to make sure I dont bring the server ow n :-t fAii it goes is start 4 
.^.■idQws with the appropriate Dinas. I just ran it and it sAPmgnk -I 





Anyway, just want to make sure its ok... 
thanks. 


b2 

b'TC 

ib7F; 


(yes, 1 should have been home lon g aao b ut I've been here all day watching DCS-3000 for the 
kidnapping... and I finally moved th d l to the DCS-3000 rack)... 


[ 


] 


Tech / San Juon 
78^ fsl) . 


SE^T 
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From: 

Sent: 

To: 

Subject: 


_JSJ) (FBI) 
8:35 PM 
(OTD) (FBI) 


tech.gif (951 B) 


NON-RECORD 


Hey senor, 

I just created a very| 

dont think anyone else here knows what a ping isl 
created it in the DCS 3000 directory and is cailedi 
at it to nnake sure 1 dont bring the s erver down 
inas....l just ran it and it seems ok 


[since I 

■«tn that minhr nriakft it ftasiftr to ninl Anyway 1 

I lf you get a chance, take a look 
All it does is start 4 windows with the aoDroDhate 


Anyway, just want to make sure its ok... 


thanks, 


(yes, I should have been home long 
kidnapping.. .and I finally moved the 


g aon h i 

O' 


ut I've been here all day watching DCS-3000 for the 
to the DCS-3000 rack)... 


SBRRET 


From: 

Sent: 

To: Ji;"; I.S 

Cc: b7>. 

Subject: 




OTD) (FBI) 


I I OTD> (CON) 

Frfdav. May 13. 2005 9:31 AM 

I (OTD) (FBI) 

I (OTD) (CON) 

TICTU Conference Presentation 



NON-RECORD 


SSAI I has asked us to accommodate some comments from l a t the Kansas City gathering. 

interlstM In providing some insight on the preservation of evidence when info is pushed from the DCS-3000 to the l 
This seems to fit really nicely into your Tec-Tips pres entatiori (slide #13) Would you have any objection of inserting a quick 
"sub-discussion" at toat point, turning the floor over toL__jor a bri ef fin m imitpi discussion on that issue? He would 
then turn it back over to you.Or, as an alternative, you can srate that^^^will address that issue when you're done with 
the rest of your slides. Whatever works best for you. 


1 think that this is preferable to providing a lime slot for an independent presentation. Time is limited and tois may be away 
to Keep everyone happy. Please let me know. 

Thanks! 


□ 


OTD) (FBI 


From: 

Sent: 

To: 

Subject: 


JD) (FBI) 
S005 7:34 PM 
J)TD) (FBI) 


UN OLAQO i nC D 


Thank you for the info and thank you for setting up our multiserver 


Ork 

Promt 
Sent: V 

SuDjed 


J(OTD) (FBI) 

. 2X5 12;41 PM 
(SD) (FBI) 


Hawaii 


NON-RECORD 


SECRET 



sEom 



NON-RECORD 


I 

b:;;: 

b^E 


Thanks for the help, 



I spoke t j i WITT) and he suggested I send you an e-mail We would like your assistanc e with making 
th<Minnraria« rn i h ; j 3Q0Q so that w e can begin receiving Pen Register information remotely In our l I 

I fc wiii also be reaching o ut to vou since apparently this requires several players. 

Please let me know what you need from us to move ahead i I s going to send me information on this system 
so that I can get more familiar with it. 




\ spoke t fj I rwiTT^ and he suggested I send you an e-mail. We would like your asais ^nce with making the 

a to DCS 3000 so that we can begin receiving Pen Register information remotely in our l | 

I witI also be reachir Ki out to you since apparently this requires several piayers- Hiease let me 
t you need from us to move ahead | | s going to send me information on this system so that I can get more 
familiar with it 


SE 



T 
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Thanks for the help, 



T 



UH fl LAQO i r tBfr 


[ 


From: 

Sent: 

To: }. 

Cc; 

Sut^ct: 


techgif (951 B) 


] (OTDl (FBI) 

I— IfSJ^ {FBI) 

Wgdnf>sriav Anril?7 2005 2:35 PM 
I riT D^ fFBh 
| {IT^(FBI)| 
pwitch • 


fc2 

b"7E 


NON-RECORD 


U N emsa i F tEP 


bc-i 

b7C 


](ITD) (FBI) 


b2 

1-//T, 


Thanks for all your help with th j { switch transition. During today's conference call it 

was obvious why the FBI is the best (screwed up sometimes, but still the bpt) - bv having people like 
you on board. It was obvious that you knew as much (if not more) than th d p eople - both on 
GALEA matters and how the equipment works... I'm sure this transition will not be a "done deal", but 
needless to say, we wouldn't even know how to start doing ttiis without your help - so is good to have 
you guys in our arsenal of resources, (and I am not even going to mention my weekly - and 
sometimes daily - calls to you with DCS-3000 questions). 

Thanks again for all the help! 
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I — 

Prom: 

Sent: 

To: 

Subject: 



lOTDWFBI) 

I I SecDI (FBI) 

\A/g<Jngg^2^,_Agrii27^005 11:08 AM 
I _ I ~? T'D) (FBI) 

FW: REQUESTED POA&M STATUS UPDATES 



TechTod.gif (2 KB) Current MAC LAN BlCSfismaPOAM.do DCF3000fistnaPOA 
Action Items.x... c (46 KB) M.doc (32 KB) 


NON.RECORD 


SENSITIVE BUT UmCLftSS IP lE P 


The item of interest to you is the DCS-3000fismaPOAM 


Cheers. 


fc 6 

b7C 


uuamliSb oompilx 
ERF (703| 1 

— Origiriai Message-— - 
From i B ecD) (FBI) 

Sent; Tuesday, April 2S, 2005 1:14 PM 
To i . . ' _:i (SecD) (FBI)f 

(FBI) 

CcC 


] (SecD) (FBI); 


Subject: REQUESTED POA 81 M STATUS UPDATES 


£: 


JSecD) (FBI);[ 


I(CJIS) 


] (SecD) (CON) 


SENSITIVE BUT u i g&LA00 i rn: & 
NON-RECORD 


AMU (POCa l has requested updates in status on the following systems which are in 

l ^rposes: b G 

DCF 3000 nSSM i I 

BICS Online (ISSM 
McIntosh LAN (ISS 

Could you please send status update to | | with a CC to me. Attached are the latest 

POAMs for these systems that are within AU. 1 hanKs in advance for any status updates. 



I ~l 

AccredKatfon Unit 


Security PMsloii/Informatlon Assurance Section 


( 202 £ 


Jjcri) 


to Ki 
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Subject: RE: 2005 ETMU (fka EOSO) New Emfrfoyee Orientation Agenda May 10-12 


u i geLAsa i r iED 

NON-RECORD 


Subject: RE: 2005 ETMU (fka EOSO) New Emi^oyee Orientation Agenda May 10-12 

Please advise if you ora representative will be able to participate in the upcoming May Orientation as 
outlined below. I look forward to hearing from you. If you could respond at your earliest 
convenience I shall appreciate it. I will incorporate the updates and forward tiie final agenda to you. 



NON-RECORD 


The first new employee orientation in 2005 is scheduled for May 10-12. Your involvement in 2004 was a key 
factor in the success of all orientations conducted. As our team continues to merge over the coming months I 
shall appreciate your feedback and involvement in continual enhancements to the orientation program. As 
evidenced by orientation survey results and management feedback, new employees are being assimilated more 
effectively and expeditiously. 

The Agenda is attached for your review. I hope that your will aiinwvrti] m nartif'inam Tha 

manager portion of the program is scheduled for Wednesda J | (a short \- 

break scheduled between sessions). Please let me know if you (or a designated alternate) would be I: 

available to provide an overview of the following systems: 


1 

DCS3000 


c 

1 



Break ■ 

_ . 


DCS5000 1 

1 


2?9 


SECh^T 





I DCS6000 I ' II 

For planning purposes the remaining 2005 orientations are scheduled for | [ 

Thanks in advance for your time. l look forward to your feedback on the agenda and your participation. Please 
call me with any questions you may have 



ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Op erational Tec hnology Division (OTD) 

54C Desk) 

54C tax) 


(OTD) (FBI 


From: 

Sent: 

To: 

Cc: 

Subject: 


:: Help or 


TD) (FBI) 


(ITD) (FBI) 
Iquestion 


NON-RECORD 


Thank you very very much| | ^ lowe you a candy bar 



Fron i 

SentT^iureda^^l^ 

To: | 

Subject: RE: Help m 


lm» (FBI) 

305 11:06 AM 

(FBI) 

buestion 


BHLLMSSlHLir 

NON-RECORD 


title of the list of dates should be Enhancements to DCS 3000; NOT Enhancements to 


SEC«tT 


:all me when you get this info. 





-nnViinal MPccanP 

Fron J l lTDI (FBI) 

2005 10:56 AM 

T«l \{TTr,\ (FBI) 

Cc) ■ nfTDUFBn 

Subject: Help on | B uestion 


b? 

b(^ 

b7c 

b7F 


uucL^StEifia 

NON-RECORD 


Greetings, 

This is the referenced table. Below the table is a list of all the enhancements, Mr, Clifford's question is 

1 , How do we have enhancements that pre-date the proof-of-concept. 

2. Do these costs capture all of the enhancement costs as welt? 

Please help!!! Feel free to update table with the correct info. I need your ejqiert knowledge and answers back 
ASAP as the document which contains this table must be at the iG's office by noon today. Thanks again for your 
help. 


System 
Description 
Deployment Dates 
Personnel 
Costs 


Nonpersonnel 


Costs 

I b^L 


Thel |s a hardware platform developed ”in-house" by the Cryptographic and Electronic 

Analysis unit to decode | piobile-to-mobile telephone calls. The proof-of-concept development 
was completed in Febnraiy ^Uul . In the Fall of 2001, the Telecommunications Intercept and 
Collection Technology Unit manufactured 1 00 of these devices for immediate deployment to the field. 


2001 


SEO^T 
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From: 

Sent: 

To: 

Cc: 


he 


I I flTD^ (CON) 

Jugg3a23S3n^2225,i0'05 am 

I llTDi (FBI 


CLIFFOR D. MICHAEL MT D^ (FBI)t 

nTDUFBii~ inTnwFBivr 

(Itc 


](ITD)(FB I):r 


Subject: 




IT 




Coop 


J{ITD) (FBI)[_ 




XL 




' — tnj 


(MUHt-BI) 


UHOLAOC i r iBO- 

NON-RECORD 


c 




The following are personnel from TICTU Wiat will serve as primary and alternate for the Coop Plan: 


]alternates) 


Switch-Based intercept Team (DCS 3000 Program) 
Collection Technologies Team (DCS 5000 Program 
Collection Technologies Team (DCS 6000 Program 


Traditional Tedinologies:^ 


t:; 7C 


Thank you. 




u m/Fsisn-ic 

70: 








U NC kA S S I F l EP 


loTD) (FBI) 





The first new employee orientation in 2005 is scheduled for May 10 - 12. Your involvement in 2004 was a key factor |n 
the success of all orientations conducted. As our team continues to merge over the coming months I shall appreciate 
your feedback and involvement in continual enhancements to the orientation program. As evidenced by orientation 
survey results and management feedback, new employees are being assimilated more effectively and expeditiously. 

The Agenda is attached for your review. I hope that your sche^ 2 lgjjjli,a||ow^ouJto_garticigate^ 
manager portion of the program is scheduled for Wednesday I ^ fa short break 

scheduled between sessions). Please let me know if you (or a designated aitemale) would be available to provide an 
overview of the following systems: 



DCS3000 



1 1 



Drean 

DCS5000 

DCS6000 



For planning purposes the remaining 2005 orientaUons are scheduled for: 


Thanks in advance for your time. I look forward to your feedback on the agenda and your participation. Please call 
me with any questions you may have. 

I I 


ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Op erational T^ hnoloav Division (OTD) 


54(T 

54(1 


Desk) 

Fax) 


i |':.2 
lb 6 


Uli fiLAOQ IPieP 
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SECKET 


S^ET 


TD) (FBI 


From: 

Sent: 

To: 

Subject: 


r_~_~^3lTD) (FBI) 

Marrh 1 ;03 PM 

I (FBI) 

FW; RMS Shipping Notice 047061 


NON-RECORD 


— O riginal Message — 

From i 1 (CG) (CON) 

Se nt: Tuesday. March 22, 2005 12:50 PM 
Toi lfrrp> (FBI) 

Subject; RMS Shipping Notice 047061 


NON-RECORD 


Returning! 


Idue to them not reeded anymore. 


DCSP/North Central Regional Supervisor - Chicago 
ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Investigative Technology Division (ITD) 

31 iDesk) 

312 Fax) 

312 Cell) 


SE0EET 


From: 

Sent: 

To; 

Cc: 

Subject: 







|AL) (FBI) 

. March 1 6 2005 9:40 AM 
f flTDI (FBI) 
rAL) (FBI) 
Connection 


tiank 8k9rd.gif (234 
8) 

_ii^q 

NON-RECORD 

I I fc'-L' 


I just want to make sure it is dear that we here in the RA (or Albany in general) do not have a current 
investigative need to connect to l [ before you have ail of your equipment read y. I th ought that 
there was a case somewhere efse (Buffalo perhaps) that had a current need to d< ^ I ntercepts 
from the switch here in Syracuse. 

So unless there is a need to collect data for some other case somewhere, we can wait until you 

are ready to go. 

Also, I received a call from^^^3ieateijday. They were just verifying contact info etc... but tfiey 
estimated that they would n5 ^ | out to install t he T 1 line b v the week of 3/28. She said she 
would call me next week after she got a firm date froni I.. 


— OdflioaLC^ 

From I 

Sent: Tuesday 
To: l 

Subject: RE:[ 


l(n-D) (FBI) 

iLlS, 2005 7:54 PM 
□aL) (FBI) 
[tonnection 


NON-RECORD 


Q do need to 


' VVS do need to connect the RA to thd [Switch using the POTS line, I was hoping the 

DCSNET T1 would be ’ ’ 

in soon and we could connect the RA to the DCSNET and the switch all at once. We can 
do it seperately though 

so we have coverage for the RA at least fo j t ntercepts. Until we get the DCSNET T1 in we 
would have to dial up to 

the Syracuse FtA to have all the offices accesss this. Let me coordinate withi land we will 

send the equipment I I 


switch all at once. We can 


SECRET 



needed to the Syracuse RA to get the dial up t 



j~hank& 


— Or iginal Message- 

From i 


JAL) (FBI) 


Se nt: Tuesday, March 1 5, 2005 3:14 PM 
To |^ l (rTD) (FBIJ 


Cci IfAO (FBI)|_ 

Subject: RE^ |Connection 


JlTD) (FBI) 


UNCLAaS IPl E P 

NON-RECORD 


ht 

hlE 


What say you 


— O riginal Message — 

From I l (ITD) (FBI) 

Sent: Tuesday. March 15, 2005 3:11 PM 

To ! I fA Li (FBn 

ce i ^n (AL) (FBI)I 

Subject: RE: | ^ nnection 

hz 


b6 

' j I 


](rrD)(FBi) 


NON-RECORD 


b'; 


Hey|__| 

I'm not sure of the need for the POTS line currently, you wilt have to ask 

one, but the T1 line has been ordered and should be arriving by the first w eek 
soon as i have ttie circuit ID and a firm due date, i wilt send that info to youl 
sends that to me about 2 days before the local telco shows up. ;-) *■ 


jabout that 
of Ap ril. As 
Lsually 


thanks fervou r help getting the POC info! 



Ori ginal Message — 

From: I \ aL) (FBI) 


Co nt; TiiAgriav Marrh 2005 3:04 PM 
To: | f flTD) (FBI) 



287 


Cc:[ 

SuDjecc^ 



UNCLABO i nC P 

NON-RECORP 


I am jsut dropping a note to check on the s tatus of your desire to put in a co nnection 
from the DCS 3000 network to the f p witch here in Syracuse to capture ^ 

I | in this region. 

As a stop gap measure, we had a pots line installed here in the RA which is available 
for the connection. I understand that a T1 line will ultimately be installed - 1 recall 
talking to somebody and giving my name as a POC for the T1 . 

is there a plan/need to use the dial up line in the meantime? 


Let us know. 


saT 


1 


Alba ny Division - Syracuse RA 
(315) 


(315) 


(cell) 


)b 6 
bTr 


UfICakSftlElED 

Linn rrinrn 
mn ^i iirirp 

DNeLAOCiriED 
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SE 


(ITD) (FBI) 


]0TD) (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


b7C 


}lank Bkgrd.gif (234 
B) 

NOM-RECORD 


c 


](AL) (FBI) 


Tuesday March 15. 20 05 3:14 PM 
I _3 tD) (FB, 

I I(AL) (FBI) 


V 

t 


h? 


Di neLAao i r iBPe 


What say youl 


OriQinal Message 

Froml I {UD) (FBI) 

Se nt: Tuesday. March 1 5. 2005 3:11 PM 

To < hL )(FBI) , 

Cc:d~==pAL) (FBI)I 
Subject; ReI Eonnection 


b:;: 


ti.b 

b7'.:; 


] (ITD) (FBI) 


(jnU-Aj>AIPlLl> 

NON-RECORD 


H^CH 

I'm not sure of the need for the POTS line currently, you will have to ask 
the T 1 line has been ordered and should be arriving by the First wee k of 
the circuit ID and a firm due date, i will send that info to you. usually sends that to me 
about 2 days before the local telco shows up. ;-) I 


B bout that one, but 
is soon as i have 


b2 


thanks for vour help getting the POC info! 


— -OriQinal Messaoe- 

From^ 


1 (AL) (FBI) 


Se nt: Tuesday, March 15 , 2005 3:04 PM 

To! 


Cc 
Subject: 


YIYD) (FBI) 
lAL) (FBI) 


Connection 


bb 

b7C 


b2 


299 



s 

PWU-AaBIl lED 
NON-RECORD 

L2 
b F, 

b^.: I 

I am jsut dropping a note to chedt on the status of your desire to put in a connection from the 
DCS 3000 network to the | p witdi here in Syracuse to capture push to talk in this region. 

As a stop gap measure, we had a pots line installed here in the RA which is available for the 
connection. I understand that a T1 line will ultimately be installed - 1 recall talking to somebody 
and giving my name as a POC for the T1. 

Is there a plan/need to use the dial up line in the meantime? 

Let us know. 

saC 

Alba 
(315 
(315 


w Division - Syracuse RA 
(cell) 


b6 

b-: 




SNOM&SiyED. 


s 
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TD) (FBI 




From: 

Sent: 

To: 

Cc: 

Subject; 


tlTDi (FBI) 
arch 15. 2 QQS 3:11 PM 
ftL){FBI) 

|{AL)(FBl)r_ 

Jonnection 


(ITDXFBI) 


}lank Bkgrd.^if (2M 

“> I 
NOM-RECQRD 


I'm not sure of the need for the POTS line currently, you will have to askll about that one, but the 
T1 line has been ordered and should be arriving by the first week of April. As soon as i have the 
circuit ID and a firm due date, i wiil send that info to you. | U sually sends that to me about 2 
days before the local telco shows up. ;-) 

bl- 

thanks for v our help getting the POC info! fc vf 


— O riginal Message — 

From l If AL) (FBI) 

Sent: Tuesday, March 15, 2005 3:04 PM 
To:| klTD) (FBI) 

Cc: l [ AD (FBI) 

Subjectl IConn'^ion 


NON-RECORD 


I am jsut dropping a note 
DCS 3000 network to the 


s to chec k on the status of your desire to put in a connection from the 
^ [ Switch here in Syracuse to captur^ |n this region. 


As a stop gap measure, we had a pots tine installed here in the RA which is available for the 
connection. I understand that a T1 line will ultimately be installed - 1 recall talking to somebody 
and giving my name as a POC for the T1 . 

Is there a plan/need to use the dial up line in the meantime? 




From; 

Sent; h^: 

To: b7: 

Subject; 


I "I ^ANl (FBI) 

Monday. March 14. 2005 8:55 PM , 

‘ (FBI); | l (ITD) CFBI);^ 

E. OTD) (FB)) I 1 

Anchorage DCS-3000 CSU Box 


SENSITIVE BP 1 inn 
NON-RECORD 


Gentlemen - as near I as can tell everything is working fine ... however about 45 minutes ago I discovered a red light 
illuminated on the front of captioned box indicating "loss of signal". What does this mean and does something need to be 
corrected? 


Thanks 



I An ^oraoe 
br cell 901 


SENSITIVE BUT UKCUtSAIMEb 




SgBiCET 


2^1 




rOTD) (FBI) 


From: ^6 

Sent: 

To: 

Subject: 


^(AN) (FBI) 

rveanesaav. Marcn uz zuub 8;33 PM 
~ 1TD1 (FBI) 

Circuit Between Anchorage DCS-3000 an 


itch For "TDMA" Call Data 


SENSITIVE BUI 
NOM^ECQRD 


I 1 1 called in a trotble ticket to the phone company after our testing this morning. ( requested that the phone company 
technician call me when they get on site and only do the work between 8 am and noon (Alaska time). This will give me an 
opportunity to include you in any testing so I can be certain if everything is working properly ... or not. Consequently, 

I expect to receive a call from the phone technician sometime in the morning (afternoon your time) during the the next few 
days virithout any advanced notice and then call (or page) you. My best guess is that the call will come either tomorrow or 
on Friday. 

Hopefully, you \mII be in a position to assist like you did today. Let me know if you think it would be helpful for|_^_^^^ 
|o be on site with the phone technician, otherwise 1 wilt try to get help from one of the techs at Dobson should 



- Anchorage 


SENSITIVE BUT I 


rOTD) (FBI) 


From: 

Sent: 

To: 

Subject: 


1 est or Ancr 


I (AN) (FBI) 

M05 8:13 PM 
niTD) (FBI) 

circuit Between CMP and Dobson 


SENSITIVE BUI 
NON-RECORD 


I I shortiY after 8:30 am (Alaska Time, which is 12:30 pm Eastern Tim^ 
are going to test the modem connection between our DCS-3000 and the JiT 
could be available to help us determine if the connection is working properly^ 


_Jand I 
aps you 


-lere is our plan; 



Witii your help, I am confident we can complete the testing within 5-10 minutes. So, hopehjity you can be a 
a rpund 12:35 om/ vour time) on Wednesday, March 2, to help us. If not, perhaps you can arrange for either 
oi to assist us. u , 


Thanks, 


SE^T 


[Anchorage 



b7c: 




SENSITIVE BUT I mri >innirtEP 

I IfOTDUFBI) 

From: I | aL) (FBI) 

Sent: i uesdav. March ui. 2 005 1:22 PM 

To: I l (ITD) (FBI) 

Subject: DCS-3000 Work Statkin 


Aftciete n i,. 

NON^RECORD 


I'm In 


rmtrying to setup a work sta^on in Oie tech room only to access the TICTU database system. The first problem is that 
1 don't have the password. The second is that it was used previously and apparently the IP address has been reassigned. 
Can you help me out? Thanks. 


□ 


DNLLMJilll4ED 


[ 


lOTD) (FBI) 


From: 

Sent: 

To: t7 7c 

Cc: 

Subject; 






’roblems 


□ (SF) (FBI) 

” *:(X15 5:28PM 
(ITDHFBI) 
F) (FBI) 


3 


UMffhAgffinep 

NON-RECORD 



ibl 


iFinally found a working monitor to boot up the spare DCS3000 computer, the 4P I 
tracking program). 




r loading the 


On another front similtar to what happened to thi 


lines, I have the following situation with 


iccounts: 


b2 

b/E 


294 





b7c 


b..? 

b7^ 


[ 


I don't think it’s the network, because; 

I are collecting fine. (S) 


^las said it is sending everything and it's fine o, 

back in, but still no tuck. All the Target Server's are 



Any suggestions would be appreciated Thanks! 


□c 


bl 


led removing the target numbers and putting them 




UHOLAQO i r i E O 


I IfQTD) fFBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


C 



ISF) (FBI) 

4, 200511:39 AM 
(ITD) (FBI) 

SF) (FBI) 


r 


roblem On DCS3000 


NON-RECORD 


land it's being monitored 2 4 hrs.: we fou nd allj 
[o 5:30 am on 2/23/05. WeP^ 
would sent us the data and they responded they would provided we check with you fbiki hr%t. Th?ylifSTST the opinion that 
the data is still retrievable from ERF, The numbers are: . 


Because we have the T-lll or |I 
to collect the data from about 9:00 pm on 2/22/05 to 5:30 am on 2/23/05. WeF 

it/r 




ailed 


r* 


F 

Sth 


Pines failed 
see if they 



We collected d ata on the o ther service providers. It seems it was ont 
has to recontaci IThanks! 



2/24/05 8:30am PST 


b2 

b7E 



Would you let me know if we 


bV-7 




295 


\/ 


SEgF^T 


From: 

Sent: 

To: 

Subject: 



-JSE) (FBI) 

,, 2005 11:15 AM 
ITD) (FBI) 


NON-RECORP 


Q per our /--rtnwrgatpn lact waaif 'Miii'|pti pieaso Update one of our DCS 3000 machines with the latest software 

The IP address i| I 1^ ^ 

Also. I re ived a call fronn i ^^ his morning (the ol j t i del. The old! b ecuritv is provisioning ali of the 
~ Icourt orders and asKed me "what the IP address is tor ihe| pATESconnection at FBIHQ". They want to 

V&riTJ in meir recor ds that they are provisioning the orders correctty" ir you Know, please email me with the IP address and 
I will call I 


u please update one of our DCS 3000 machines with the latest software i,, 


Thank you, 


office) 

!cell) 

fax) 


OTD) (FBI) 


From: 

Sent: 

To: 

Subject: 



lAL) (FBI) 

:005 10:26 AM 
(ITD) (FBI) 


We should Ho a nn nn Wo're Ordering a pots iine as a short term solution until we can figure out how we'll pay 

for the dds circu s H the point of contact at SYRA, but he'll be off next week, so I'll be the point of contact. One 

question, we have not receiv^ anything on ttie DCS-3000 since 2/15. Any problem that we’re not aware of? Feel free to 
contact me anytime. Thanks. 


Original Message 

Fram I r rmi (FBI) 

Sent: Thursday, February 17, 2005 4:43 PM 
Tnl ; (FBI) 

Ccj l(ITD) (FBI);r 


(ITD) (FBI) 


s™et 


296 


r:l»l 




fiTiTTF 



Thanks for your help, 


PS. The DCS 3000 training coordinator isT 
a trilogy e-maii 

is probably the best way to contact here. L 


SENSinVE BUT IJMCI ASSIFIFD 


SENSITIVE BUT UN CLA SSI F IED 




]a. 


297 


ue to the move our unit is going through 



All, 

The one-way push is currently being field tested at site ^ | tnd | [T here are field issues involving the performance 
between thfiLflOe-way push and the RW. All parties involved are wBIxing to correct and improve the systems performance];-; 
In paralle l [ testing is soon to begin v/ithin the ERF facility. This is a complex and integral part of the overall solution. 
Upon cornpietion, this functionality shall be field tested as st^ed above. 

To date] Ifield offices have received the one-way push equipment for installation, | |sites have completed 

the install, but rVItt yeractivated for connectivity. Remaining sites can expect to receive equipirlSflTWoughout the year and 
prepare for installation. Each site shall be informed in advance regarding installation and activation. ERF is committed to 

298 


SKfiET 


>^ET 


minirrize both operational risk and system failures. There shall certainly be growinQ pains as we expand the amount of 
users incorporating CALEA into the FCI cases. There is a vast number of telco providers and switch vendors that make an 
exhaustive in-house test virtually impossible. So some point in time, additional sites wilt be connected in order to field test 
as needed. We appreciate your cooperation and patience regarding this development process. 



SBIT is assisting the Miami Division with the FBI's first-ever i te lephone intercepts. Miami "went up" on 

pen-registers yesterday and expects to implement an emergency FISA either tonight or tomorrow. Miami is using the^ 
DCS-3000 system to collect pen-register data and the Red Wolf for T-50 audio. I'll keep you informed. 


OTD) (FBI 



SECRET 


UIICLACCiri» 

NON-RECORD 




b,:: 


I |l a m olannino to travel withl h d I TN. next Th ursday - F riday (2/3-4/05). S8ITJtias.dfiCi£i|dJa 

<jp5fS3e the l R A to a node on tne uua-3000 network, due to th i tw itch facility located a l 

and I will be relocating the DCS-2QQlLteffiimal to the CMP, meeting with j l echnician on Friday and installing a 

new router for the upgrade. has continued to exhibit unique "issues" for SBIT/TICTU. We have 

determined that this course of action is the best solution. 


I ftieeommuniuiisns imereefit and CoBectlon Technology Unit (TICTU) 
Etectfontc Surveillance Technology Section 
Investigative Technology Division 
Qu 
70a 



L6 

h'K: 


b7E 


UNLLAJJII leu 


UHOLAia iPI g P 


[ fOTDl (FBI) 

From; I I flTD) (FBI) 

Sent; Tuesday January ?j=i 2005 7:49 AM 

To: I Irrv^ (FRh ^ 

Cc: I | CV) (FBI)| |(1TD) (FBI) 

Subject; uMLtA mieicepi ' 


1 1 

NON-RECORD bo 

bX' 


I spoke w itH k bout getting your equipment for the 9.6 CDC circuit. He recommended that you speak with | | 

I bbout heloino to set it uo since he is familiar with that stuff. i— i 

■ ^ ^ 


So, I will leave the CDC termination and configuration up to you guys. 

When the T 1 gets delivered we will terminate it into the Red Wolf and I will tap off of it for the Demon. 


I suppos 



II need a RMS for the work. 


Let me know if you need anything else. Give me a heads up when you know what date the T1 is supposed to be in. 


Thx 
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Federal Bureau of Investigation 
Investigative Technology Division 
Data Intercept Technology Unit 
Wireline Data Intercept Group 


703 


3esk 

202 


Mobile 

888 


^ager 

703 


Eax 

1 


hi:. 
b7c 
h ’E 


U^icusftiBiD. 


From: 
Sent: b-'c 
To: 

Cc: 

Subject: 


loTD) (FBI) 


llTD) (FBI) 


_^4onda^^Januar^^0j2005 10:51 


2005 10:51 AM 
llTD) ( FBD.dl 
llTD) (FBI)1 


l^(ITD) (FBI) 

JiiTD), 


(FBI) 




JiyiWW Administrator Training and Voice Box Training 


b:;: 

SENSITIVE BUT UHCLAQOlPIgP |^,7 e 

NON-RECORD 


I I 

According to the email below, W FO is reouestirta for D CS-3Q00/5Q00/6000 training. We are addressing the DCS-5000 
training. You may wish to contac i | o discuss training for your respective fx^ograms. 


-Original Message- 




From|_ 


]rrD) (CON) 


Sent; Monday, January 10, 2005 9:57 AM 
TojI ^WR (F^ 

Cel IffD) 

(nt J (FSllL 


Subject:^ 


_| System A 



liimUESLLX 


] (rTD)(FBl) 

raining and Voice Box T raining 


JtD) (C0N);[ 


SENSITIVE BUT UllgfaASCiriEP 
NON-RECORD 


b2 


I l As discussed this morning, tf>e 22 ETs and TA's that you had indicated needed Red Wotf System 

Administrator training, I am passing this list to the Program Staff to have the DCS3000 and Advanced Voice Box training 
requirements addressed. 






301 


S^E 


l look forward to your response as to whether any of these individuals are scheduled to attend the WFO dedicated System 
Admin Training class scheduled for February 1-3 that would accommodate up to 10 students. Are some of the people on 
this list scheduled for this class? If not HI need to schedule additional classes for those individuals remaining that require 
training. 


The list as provided by| 


3f the Technical Personnel Development Branch include the following individuals: 


BAE Systems Information Technology 

703T^ 1 


SENSITIVE BUT i 


seMet 


From; 

Sent: 

To: 

Cc: 

Subject: 


F 




ilTt 


ITD) (FBI) 

5 10:50^ 


iTQj(FBI)[ 


FW: NY Field Office 




)(fbTC 


System Administrator Training 


- - t lTDi (FBI) 
JItD)(FBI) 


SENSITIVE BU T UMgLAfiS I REl> 
NON-RECORD 


I I 

According to the email below, NYj&iemjeatuu for DCS-30CX)/5000/6000 training. We are addressing the DCS-5000 
training. You may wish to contac | | to discuss training for your respective programs. 

thnx, 


c 


3 


L7C 


Or iginal Message — 

From: ^ 


J (ITD) (CON) 


it: Monday. January 10, 2005 10:10 AM 




(FBI) I _ 

Subject: NY Field urticei 


lY) (FBI) 
Tm» (FBI);!. 


TTOl(CON) 


I 


Jystem Administrator Training 


1flTDUF8n:l IrroUFBTVr 

IUIUj(Fttij J 


]{NY) (FBI) 


]rrD) 


b7^. 


SENSITIVE BUT UHgLAM IPl E P 
NON-RECORD 


h6 

b7C 


I received a list of ET's and TA's that you had sent t j b f the Technical Personnel Development Branch in 

which you had indicated needed Red Wolf System Administrator training as well as DCS3000 and Advanced Voice Box 
training, t am responding to the Red Wolf System Administrator Training only and am forwarding the DCS3000 
and Advanced Voice Box training on to the Program Staff to address. 

Please confirm whether the entire list needs to have Red Wolf System Admin training, we will be scheduling training to be 
held at the Raytheon Falls Church facility for those individuals you identify: 


frXi 

fc'C 




Thank you 
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3ii! 


SKtlt 




From; 

Sent: 

To: 

Subject: 


Happy New Year 


tS C) (FBI) 
^005 11:38 AM 
l(ITD) (FBI) 


NON-RECORD 


Thanks for fielding that questu 
also have paper copi^_of0^ 
are the latest. Thank^ 


j will reboot the DCS 3000 so your|__ 
-rancisco and Sacramento service areas. 


^^fcan be operational. ! 
ould you tike them? They 


Tine LAO c i r icn 


TD) (FBI 


From: 
Sent: ^ 7 , 
To: 

Cc: 

Subject: 


|{SL) (FBI) 

nnmhnnT nfV M 2:18 PM 

1 I (ITD) (FBI) 

(iTD) (FBI) 

Site database (update) 


NON-RECOR 


I spoke witi 
P UStoT 

concerning it J 
On 12/27 ir 


>7 regardino^ilja 5 Ufl,SLj&£lirrentlv hav 
usage, Th d y ersion r^ 

re St Louis metro area in order for tn| 

_ I ft^herein they advised they woulo^ 
Jccount and ^uld follow up by mailing 
ffliy or in the correct formats please conts 


rrently having with the DCS3000 a nd its inab^l litv to I I 

fersion i" fcdvis ed that we nee d b forward info/data 

3r for tn| |rogram to interface correctly. 

3y wouIg email you a copy of the data directly to your 
by mailing fiomp reason thi s data does r^ t 

ease oontad ■ lA/ireless @1 \ 


\ | to advise her that you did not receive the information. For reference SL's Court Order Number is | _ - 

Please advise when this new data is incorporated into your system and that we can star| fYi: This case pertains 

to a violent gang of bank robbers utilizing a take over operation of the bank. No one has’utHJJi MUilTet, but they are 
beginning to escalate their activity. 
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iv,;: 






From: 

Sent: 

To: 

Cc: 

Subject: 


lonaav uecf>moer i 




ecD) (CON) 
2004 7:28 AM 


ITD) (FBI) 


DCS 3000 Action Plan 


ilTDHFBI) 


DCS3000_owner_ltr 

-wpd (11 KB) 

SENsmvg BurPNU-Mjaii ibo 

NON-RECORD 

C 

I 1 

Sony to bother you with this. When the DCS 3000 was accredited in May last year, Uiere was a lien to create and 
document an audit review and retention procedure. Do to recent focus on tracking Action Plans, mostly driven by FiSMA, I 
need to veri^ whether or not this has been done. 

For the record, DOJ/FBI requirements are for weekly reviews and 90 day retention of audit logs. I suspect that you all 
probably keep them much longer than that, but I have no idea about your review policy. Please let me know what you can. 
Attached is the EC stating that this needs to be done. If it has just let rr>e know. 

If not. let me know what kind of impact diis will have on your time. I know you are busy, and given that it has been this 
long, if the policy hasn't been done yet, i just need a ballpark estimate date. 

Respectfully, 


AU, 

( 202 )[_ 


QariiriKj 


! 


ivision 



sEtsismvE& i (Turin ‘t^ninrn 
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From: I l lTD^ (FBI) 

Sent: Tuesday. December 14 . 2004 9:41 AM 

To: |~ | TD) (FBI) 

Subject: b'witcribased intercept (DCS 3000) 



Notebook. jpQ (2 
KB) 

Ulieh*00tHED 

NON-RECORD 


I am just checking in with you regarding the scheduling of the above referenced classes. When I reached out to you in 
September, I was told that they were yet to be determined. Are there any dates in the works? I have several OJT/TTA's 
interested in taking the course. Any assistance you can give to me will be appreciated. 





UWtLMAMWgfr 


From; 

Sent: 

To: 

Subject: 


loTD) (FBI) 


I (FBI) 

Jjiflwiav nRCRmhRrn? 2004 1 PM 
I llTD) (FBI)J 

'ucy 5000 PKOyLLM*^ ^ — 


JlTDHFBl) 


lIFRlI-AtiblHEU — 

NON-RECORD 5 ^ 

I I 

We were up on a | j I updated tbe warrant info database. I cant get the DCS 3000 system to 

download anythin g | ays mere is data in the system to be downloaded. They have the order in their system. 

Could you check the system to see if there is anything wrong. Our dial-up help number to the DCS 3000 system here in 

I 

Thanks for your h^p ^ ^ 

b7C 


I I 

Uhariotte^Kaieigh RA 


UN etACCtr i E D 


seMt 


30 S 


From: 

-Sent: lib 

To: h7> 

Subject: 



bTD) (FBI) 


\ (SC) (FBI) 

0 2004 7:54 PM 
ITDXFBI) 

TW niF ireiess to | j 


b;: 


UMCbAgsirigg 

NON-RECORD 


Will friis cause any problems with the DCS3(X)0 with two case ID's monitoring the same target? Please advise. Thanks, 


a 




O riginal Message 

FromtC 


ISC) (FBI) 


Sent; Tuesday, November 30. 2004 2:39 PM 


To i l(SC)f FBI)[ 

SuDjecc:) |ivireiess to| | 


] (SC) (FBI) 


b7^ 


TiriLUliJII IML 

NON-RECORD 


ib2 

b^E 


Hey guys. 


orrl t ailed and also be provisioned throuQ H~ I which is r\ o^ j in 

Iprovision. The access will be the first 10 digits with an added "AWSM" at the end. j p n pe 

b5 

n 

iTTP I nmiiiiibLi 


addition to 
reached 


at 800T 




v/ 


'SfeT' 


ET 
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S^(feT 


From: 

Sent: 5v c 

To: b?c 

Subject: 


IT AT^ (FBI) 
imbera o 2004 1:3 
_^(1TD) (FBI)] 
! change request 


OTD) (FBI) 


UHULMAII ICD 


Per today's conversation witi 



From: . 

Sent: ^ 

To: 

Cc: 

Subject; 


|IT0) (FBI) 

mter23, 2004 5:41 PM 
_IL41(FB!) 

f lTD) (FBI) 

Tireless cell site Tracking 


NotelK)ok.jpg (2 
KB) 

NON-RECORD 


ENSITIVE BUI 


I proces sed all the! 
example ! ~ 

not listed in the latest! 


ju recently sent me. It appears this data is not up to date. Ei 

i This 

spreadsheets. 


1 have updated youi | |w ith the most recent data, but you should probably asked 
have better data avallSDIe. 
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Hi guys, 

Attached is our latest list of | 1 froi 
to the TICTU website please. 


ireless. I was wondering if it could be added 



These steps have not failed me yet. 1 was wondering if | t ;ould be modified to do this? 

Let me know. 



b6 

b/C 
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iTTfri r^iprn 

NON-RECORD 





ha\/p annrnariied the jitaa e in our van integration project virtiere we are ready to begin transmitting ! *1 

jformation from the DCS3000 to a non-secure beta version modem that is on 


a lanton witr i l unagi'SfandinQ this is for testing purposes at the Tech Conf. we are not sending any case 

information or if this was case information there is no sertsitive information. With all this being said do we have the 
blessing to continue on with this testing in current status or do we need to include some encryptbn? 


h::: 

b'' t- 


ITD ATU. DIVI SION IS 
703\ bffice 


I IU£L^£AIWHh 


muLmAJiFieD 


□OTD^ fFBI) 


From; 

Sent: 

To: 

Cc: 


lb 7' 


c 


IT^ J [OTSnr i 


klTD) (FBI) 
eT^2004 9:21 AM 

illD) (FBI) 

| lTP) (FBI); I 


](ITD) (FBI) 


UNOLAQO i r iED 

NON-RECORD 


i:.'2 

b 7 E 




have approached the stage in our van integration project where we are ready to begiC 


_^^^_^_^lnformation from the DCS3000 to a non-secure beta version modem that is on a iaptop with 

J understanding this is for testing purposes at the Tech Conf we are rrot sending any case information or if this 

was case information there is no sensitive information. With all this beir>g said do we have the blessing to continue on with 
this testing in current status or do we need to include some encryption? 


: 



IIU.AW.Ul 

nmuN IS 
office 

703\ 


uuCMeetPtED 


SEOREI 
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From: 

Sent: 

To: tc6 

Cc: t-^c 

Subject: 


(FBt) 

2004 3:53 PM 

, If IIP) (FBI) , 

I WF) fFBI): l 

:el( phone intercept^ext messaging 


(WF) (FBI) 


BECftE: 

RECORI 


Just to toltcw up on the vcucemaH ) just left you: 


As I indicated, I was our CMP. The target line i^__^__^__pnl^^__^^^lell phone, 

The case agent knows that the target ha&meaaaging capability, but does not know for sure if he is using it. Sne has not 
seen any messaging in the gnmmanas I TanH | looked ^ the summaries and did not see any messaging. We did 
see “CC open" and "CC closed" in the log file, but we did not see any text. 


I tfiinlj^ 
Thank: 


plans to call you Monday morning to ask you to check the history on this case. 



— -Oripinal Message- — 

From: |(rTD) (FBI) 

Sent: -riday, November ll, 2004 11:48 AM 
TOi ll 1 (WF) (FBI) 

Subject: RE: Ceil phone intercepts/Text messaging 


(S) 



2 





S^ET 
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UNCLASSIFIED 



[ 


From: 

Sent: b G 

To: 


Subject: 


VOTD) (FBI) 

c 






|TO) (FBI) 
2004 1:34m. 



cz 






1 


Tft/cv/trpiX 




RE: Arrest made in WFO case 


JtD)(FB));L 


IkMIU:] 




IfWFI f FBh: 

T(ITD) 


1 


SENSITIVE BUTTTfim im rirn 

NON-RECORD 


Thanks □m glad we were able to provided you with the operational and technical support you requested. 
ViQinal Message.--^ 

^F) (FBI) 

irk’C;.d am 

IfWFUFBlH I wFUFRllf 


fVo^ 


JWF) (FBI) 

S ent: Tuesday. Novem ber 097 20Q 4 in-S4 A M 


C 


(n-D) {FBI)I 


DOjLUL 

inCWF) fFBl):l 


Subject: Arrest made in WFO case 


J (ITD) (FBI)[ 




I(n-P) (FBD; | 


JwF) (FSI) 


? 


r- 7C 


SENSITIVE BUT uiiiriiAgcinrp 
NON-RECORD 


h6 

hi- 


The fugitive sought by & 


of WFO was finally arrested at the suspected location last night in Waldorf, MD. 


A routine inspection of the apartment was conducted by the property management with plain dothes Charles County 
PD Officers. The subject was arrested without incident and was astonished that he was found since he has been 
hiding in different locations since March of 2004. 




I 


Dfovided assistanoe i n determining that the pho ne was roaming ont<l 
helped with the DCS-3000 interpretation, 

I would like to thank all of the people that worked on this very long and drawn outj^^^ 


network, 


] 


bo 


L 




31S 


fe 


From: 
Sent; ^ 
To: 


J(WF)(FBI) 
p9, 2004 10^ 


fWF) fFBll 


Subject: 


Arrest madl 


SENSITIVE BUT UNtlLAJJIFiElJ- b o 
NON-RECORD t 7C 


The fugitive sought by SA 


if WFO was finally arrested at the suspected location last night in Waldorf, MD. 


A routirre inspection of the apartment viras conducted by the property management with plain clotines Charles County PD 
Officers. The subject was arrested without incident and was astonished that he was found since he has been hiding in 
different locations since March of 2004. 




I l ofTiCTU provided assi stanceir 

with the DCS-3000 interpretation, and T 


> phone was roaming onto 


network, helped 


I would like to thank ail of the people that vrarked on this very long and drawn ouJ 


SENSITIVE BUT UNCLASSIFIED 
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t just wanted to extend my gratitude t J I for the operational support tie is providing. Specifically I I 

is instrumental in helping with the development and deployment of the DCS-3000 One Way Push system. SLC was the 
first official test site approved from the security office which assisted us in order to determine the robustness of our 
system. It was during this test phase that improvements were developed by Raytheon and incorporated into our latest TtU 
Software base-line. The new software enables the CCC and CDC data to be correlated using a time-based alg orithm. 

A vast improvement from hard copies and manual correlation. Although the new software hasn't been validated f I 

continues to provide us with invaluable information. His efforts continue to help us gain great strides as we begin to 
establish new operations throughout the field. His expertise and knowledge has assisted us In completing our initial goals. 
We are fortunate to have him on our side. More than thanks are tnjly in order. 



Will you be able to present for the upcoming orientation. If not, can you advise of a recommended replacement. 

Your involvement in the past has been an important factor to the overall success of the orientation and I hope that your 
schedule will allow you to participate again. The technology manager portion of the program is scheduled for Wednesday, 
1 7 November from 1 :45-2;45 and 3:00 to 4:00 (a short break scheduled between sessions). Please let me know if you {or 
a designated alternate) would be available. 
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DCS5000 

DCS6000 


2PRFT 

1 (pending) JK,- 

confirmed) 

confirmed) 


Th2 nks in advance for ydSurtime. 1 look forward to your feedback regaining participati(an. Please call me with any 
questions yc u may have 


l^lanla 


1 


Electronic Surveillance Qperationjs Support Office (EOSO) 
Electronic Surveillance Technology Section (ESTS) 
lnv« stiaativelTechnology Division (ITD) 

540 l(Desk) 

54C pax) 

hie 


UWCCBSSITTED 


From: 

Sent: 

To" 

SuISject: 


loTD) (FBI) 

1 l\N'' fFan 

TueseJay, |s|9vember p2. 2004 6:26 PM 
1 IITD'' fFBh 

RE: CCS-3000 Client Located in Resident Agency (RA) al 


SEIMSITIVE RIITIlWri AciQipipr|j 

NON-RECORD 


Wfl d 0 . C IwiI send out later this week and you should get it sometime next week. 


I b6 

b7C 

Orisinal Messaat 

FronL n-TD) (FBI) 

Sent: ivondav, Nov€imber 01 , 2004 8:12 AM 
Td (AN) (FBI) 

Subjecit: RE: D03-3000 client Located in Resident Agency (RA) at 1 

^ b2 

fo7F. 


SENSITIVE BUT Wn^AnwOffW- 
NON-RIECORD 


'1 

benefit back t) us if you could. We will surplus it. 


c Oriainal Messaae — 

Fro ml 1 (AN) (FBI) 

Sent: Thursday October 28, 2004 5:32 PM 
T4 Itn-D) (FBI) 


b2 

fc7E 





SENSITIVE BUT U W OLAeC i r iBP b 

NON-RECORD b7E 


hi, 

i;-7 


he case agent inT 
:eT 


power light is illuminati 
blank. 


^dvised me today that the monitor ERF sent to the RA has stopped working. The 
The monitor is on (or power is cycled off and back on), however the screen remains 


wncn 

The RA has another monitor available, so no replacement is needed. 


My question is do you want the broken monitor sent back to ERF or should I tell the agent to throw it in the trash? 



-And 
r celi 90 


I 



SENSITIVE BUT nrifi I in ninrn 


SENSITIVE BUTywri nStlFIEn 


SENSITIVE BUT UWOLAStiriEP 

I I (OTP) (FBI) 

From: I | (ITD) (FBI) 

Sent: ^^^04 8:35 AM 

To: I JlTDUFB h 

Subject: FW: Visit of| IVictoria Police, Australia 


DneLASQ i r i EU 

NON-RECORD 

he 

k7C 


— OrjgjnaLMfissage;™ 

Fromr l l fITD> (FBI) 

S ent: Monday. November 01 . 2004 5:15 PM 
To l I (FTO) (FBI) 

cc i r nxiixEaii_ 

Subject: FW: Visit oq jvictoria Police, Austraiia 


ED 


NON-RECOR 



Tielse be prepared to give a OCS-6QOO demo () don't Know time) 
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SI 




X 


l5 


m fggij :wigi w:h«« M 


(UD) (CON) 
W 5: Qq PM 
FBI)J 


l(rTD) (F8I)J 


1(ITD) (FBI); 


ITDKCON); 





The meeting with 


I imam^B! mSiiaara t uonoii 

1 1 tudlfiSli] ■■■■■■■■■ ilit>lU^T! 


ITD) (FBI 


Subject: Visit o 


ifiiiSWia^ 


rro) (FBI); 


ictoria Police, Australia 


NON-RECORD 


the Victoria n Police, is this years recipient of the Tynan/Eyre Memorial 
Scholarshio ^^^ "I s currently the Manager of the Telecommunications Interception 

Unit for ttie Victorian Police Ethical Standards Department. The ITD will provide a general 
overview of telecommunications and data intercept matters in support of Criminal Law r-G 

Enforcement. h c 

Tomorrow's briefing wiil be in “round table" format, Sam to 1pm, Main Conf. Room. 

| will be the host. 

Iitfill handle the DES (DITU) discussion or provide representation. 


SE0RET 










I will handle the brief, including the ATU discussion. 

]will handle the TICTU discussion and DCS-6000/3000 demo. 

I will handle the EIMO (EDMS) discussion and demo, 
please reserve the Main Conf. Room, 


j Will be at HQ in the momrng. 


' eieuuurriUluiVBJJUJJLe leuAiology Sectron 
iovestigativv Technology Dwisbn 

7dJ I 


OTD) (FBI 




SFwET 

orientation. Scheduled dates are; Tuesday, November 16 to Thursday November 18. 

The Agenda is attached for your review. Your involvement in the past has been an important factor to the overall success 
of die orientation and I hope friat your schedule will allow vou to participate again. The technology manager portion of the 
program is scheduled for Wednesdav l , . . short break scheduled between 

sessions). Please let me know if you (or a designated alternate) would be available as noted below from the original 3Q 
schedule. 


DCS3000 

I 

Break 

DCSSOOO 

I Dcseooo 

Thanks in advance for your time. I look forward to your feedback on the agenda and your participation. Please calJ me 
wth any questions you may have. 



Electronic Surveillance Operations Support Office (EOSO) 
Electronic Surveillance Technology S^ion (ESTS) 
Investigative Technology Division (ITD) 

5411 ^Desk) t:- 

54 J Fax) 


OTD) (FBI 


From: 

Sent: 

To: 

Subject: 


IAN) (FBI) 

cfoberijti. 5 flfl4l:32 PM 
f yP) (FBI) 

:iient Located in Resident Agency (RA) al 


NON-RECORD 


I the case agent iii | [ advised me today that the monitor ERF sent to the RA has stopped working. The poiwer 
light is illuminated wherr!n6 fTlOhitor is on (or power is cycled off and back on), however the screen remains blank. The 
RA has anodier monitor available, so no replacement is needed . 


My question is do you want the broken monitor sent back to ERF or should I tel) the agent to throw it in the trash? 


, l Am 
F^90' 



SBgRET 


From: 

Sent: 

To: 


to 6 
h'C 


Subject: 



OM) (FBI) 
3:04 PM 
(ITD) (FBI): 


l(ITD) (FBI) 


ireless in Nebraska and Iowa 


I Iwireless 
' lA Nf'ltte Con... 

NON-RECORD 


Hi guys, , 1 

Here's a li st of |i Io wa and Nebraska. The contact for this info wa J I 

HfDhonfltir.^ with ! i Nire'ess. Keguiatotv uent I T-i*> said he was going to irvciude a 

printable spreadsheet and an importable one where the lat long was in "decimar f ormat Looks like we ar e going to be 
trying to get a couple of computers up in the TIM rooms which will be used v«th the l 1' _ ~ t oftware. The 

CPUS will be loaded with wn2000 only to start with. I’m assumin p we wil l need to load the DCS3000 software on both 
machines. Do we have a ^^r as many copies of the[~~^oftware as we need or is that an issue? I'm going 

to take a look at the DCt>3UU0 Manual and win2000 to see whal kind or restrictions I can put on the two computers to 
make sure people don't start mucking up data on the DCSNET Not to crazy about them being networked on the same 
system as all our elsur stuff. If you guys have any suggestions on how we can make sure things don't get fouled up we'd 
appreciate any advise. Thanks guys! 



TD) (FBI 



Subject: 


napping inaaence 


NON-RECORD 


I wanted to express my sincere appreciation once again for your assistance in r^ard to a kidnapping incidence on the 
night of IQ/1 7^. Two violent kidnappers were arrested as a result of your assistance. I felt bad for having to call you 
repeatedly throughout the night pertaining to the DCS 3000 tracking software, but your immediate response and 
willingness to help us made me realize that you were as passionate in catching these criminals as we were. The DCS 
3000 trar^ing software has once again proven to be a critical tool in our profession. Thanks again for your assistance. All 
the Tech guys here in Dallas appreciate you. 


Sincerely, 


c 






bh 

I'VC 


HNOl^CgirgD 


I lOTD) (FBI) 

Frem; I L a> (FBI) 

Sent: Tuesday, October 19. 2004 9:07 pm 

To: I If lTDi (FBI);| | (!TD) (FBI) 

Subject: DCS3000 questions 


U HChACC i r iB P — 
NON-RECORD 

bo 

Hi Guys, 


I sent two client computers to yo | B oth haclib&l’blue screen of death" on them. When you wipe the drives and load 
the newogerating svs ipm ca n you also load th J fc grvRr software on one of them. We are starting to have problems 
vwtti oul fclien i B ctuallv got the "blue screen of death” on it this past weekend. She rebooted the computer 

and was aoie t6 get it running. Also, can you load Windows 2000 or higher on these machines? We want to store all of the 
pen register data on a CD when the case is over. NT won't let us install an external CD writer. 



ant 
to includf 


to know if you guvs ar8jvOTkin^wjth[ 


Jata and[ 


I the telephone applications manager, on the new upgrade 

Jito TA. 


Why is itwhen we attempt to do a client upgrade, it does not upgrade to the latest rev. Our .12 machine wilt only upgrade 
to 4.8c, our other client machines are at 4.8k. Or does it really make that much of a difference? 


Can you loadi bnto ,13? The user password i 


Thafs it for now. Thanks for your help! 

ZI Z D (S) 






b2 

b7ii 
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5^E 


OTD) (FBI 


From: 

Sent: 

To: 

Cc: 

Subject: 


^(ITD) (FBI) 

^AJor^nac;^a'w It jrVXA 3;27 PM 

I fi rm fFRh 

—I I Di fCON^: j 

DCS-3000 Upgrades for Highoiae macnmes > 


□ (ITDMFBI) 
Jay Push) 


NON-RECORD 


I l and I spoke briefly about the best approach to upgrade DCS-3000 apllications on the High Side machines 

during their life cycle. Please ponder a bit on this and let me know what you decide, 

i guess I would prefer not being responsible for upgrading them from ERF vid 1 bG 


T1NLLMSJIR6P. 


From; 

Sent; 

To: 

Cc: 


OTD) (FBI 


IHNHFBI) 

CtOber 06, 2004 3:24 PM 
nilTDi fFBn 


iH) fFBh 


Subject; 


NON-RECORD 


ntercepts on Voice Box III 

)b,G 

b7S 


, I(1TD)(FBI): 

riTDHFBI) 


Aloha M Am gettir>g slammed on the|^_^Jcoverages on Voice Box (VB). Problem is that th^_^^_loverages goes 
down in the middle of the wire for some unknown reason. The VB cannot handle the intercept and tne interconnect b ;■ 

Certain lines. What we have done is to switch boxes out, going from the Adtran-BRt card to the Kj 7 c 

px and restarting th| ^rver. When we do this, it seems to be stable for a period of time then the 
il^tSUbrinect coverages goes down.' Illlbl&'a random situafion, but occurs during a peak time during the T-3. 


The drug squad is contempl 
phones. We currently hava 
situation, but enough problei 


ving T-3 which will involve|^^^_^^^_| of which a number will probably bej 
shones up and am having problems randomly on the interconnect (not an eve 
ise a headache). 


Need your help, to expl ain to th e drug squad/supervisor & ASAC wh^ 
field is either restart th d t erver or switch the receiver from the| 
(both| Jnd I) cannot provide an adequate explanation as to wnyl 
T-3. ' ' 


FYl, I received an e-mail froi 

h6 

hK' 


are on thd j ftii we do in the 

lu Lack and forth. We 
;overages fail during toe middle of toe 


n 8/9/04 which answered our problem during a period prior to the ongoing 


s 

situation which follows; 

I 1 

I understand your office recently experienceii£fifflS|technical difficulty widi one of you| fitle Ills. | | 

informed me late Wednesday evening that j l aw enforcement support group suoaested r m lack n r intercept audio 
problem may be due to a knnwrt h ia in their new provisioning system. Over the last few months r | ias been_^ 
transitioning from their intercept Provisioning Center fCiP Ct whic^ is no longer suppSTTSo by|__pnd is , 

not compatible withitiailffiitL^^^itching software (GSIVM7) used by | I to the new SS8 Xcipio interbypi ' 
provisioning svster j l aw enforcement support technicians have experienced a specific problem during this 

transition; pen-negi^r failure after a Title*lll expires but the pen-register order is still ^tive. T his problem is attributed to 
the porting of the old Cl PC database to the new Xcipio database. SS8 is working withl^^Tto resolve this problem. 

However, this was not the symptom that your office recently experienced. Unfortunately, me support person on call late 
Wednesday evening did not ^lly understand the Xcipio issue - 1 got my information from Ibeir senior technician. 

in an attempt to resolve the problem, the on call technician removed the intercept from the Xcipio database and re-entered 
it at sometime around 10 pm EOT. Your DCS-3000 indicates audio intercept was re-establish^ at 18:30 Hawaii time that 
evening. So, it appears the act of re-provisioning the intercept resolved the problenr ^ s enior technician is not 
convinced it was an Xcipio problem, and I am not sure either. p; 

Pen-register problems are much easier to troubleshoot than audio problems because the pen-register data is 

using TCP/IP, for virhich we have many troubleshooting tools that we can remot^y execute from Quanfico and 
n remotely execute from ttieir offices in Virginia. 





Troubleshooting audio intercept problems associated with wireless providers can sometimes be difficult. The reason is 


fc>.2 


there are few troubleshooting tools available, and neither law enforcement nor the service provider has full access to both^^' ‘ " 
ends of the delivery system for troubleshooting. Both the law enforcement agency and service provider must attempt to 
troubleshoot the problem in concert. This often takes time to accomplish. 

For your most recent case, it is impossible to identify the exact point of failure in the delivery system since we did not 
have adequate time to test each point in the system before it started working again. We have a test phone and collection 
system similar to your office’s s \retem at E RF. We tested several scenarios yesterday and were unable to reproduce your 
problem. I also 'analy sed all vo^ fo en-reoister information collected on the DCS-3000 on 8/4/2004. This data 
suggest that your othe| ritle-lll was working fine during the period of failure for the 0027 number. This almost b - ^ 


certainly eliminates the possioiftty that the problem was due to a conference bridge or external line resource limitation. 

I b id me that you tested your collection system bv calling into the (SDN delivery line and everything check out. So, 


the only plausible explanations for the failure are: 
Xcipio system failed. That's my best guess. 


1)th 


pal 


intercept system failed for the specific target, or 2) the 


If you have any questions, please call me at 703^ 


bto 

L7C 


I was wondering \f this situation still applies? Can you provide me with some answers? 
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SE^T 







I finally did the RMS for the DCS-3000 system to replace our old/dying box... The RMS # is 091620. 
No rush on it, as the old system is still alive... BTW, I did request a rack mounted monitor/keyboard 
too, since it will now go in the rack and our old monitor/keyboard will not work as nicely - as well as a 
UPS (Hey, you guys have $$$..you know how it is down here). Anyway, if the last two are not 
available, we'll improvise..., Feel free to come down for the delivery/installation :-) 

thank s. 

□ 

so use TROJANS - BEAT THE HOKIES!!! 


in L,> 




OTD> (FBI 


L I'TD) (FBI) 

Thtjredg^,_g£[jJg[jl^^02, 2004 8; 10 AM 
ISE) (FBI) 

|ITD) (FBI) 

RE; Old Seattle-Portland DCS-3000 Lease Line 


NON-RECORD 


You can go ahead and cancel the lease line from Seattle to Portland. 


Please let me know if you have an questions. 
Thanks! 




L- 7 C 



Original Message 

Froi ri ~I tD> (FBI) 

SentJ^JgSiri^^a^^Segtem 01, 2004 5:30 PM 
To: I P TD) (FBI) 

Subject: FW: Old Seattl^Portland DCS-3000 Lease Lirve 


UKCLASA i m eP 

NON-RECORD 


Jould you look into the connections and let him know? Sorry to be dumping these on you but I know you 
have a log of what connections are cut over. 


" — ur 


bG 
b 7 C 


Prom 


1 


iQinal Message---. 


](SE) (FBI) 


SenfcJWg^ngg^g;£(_S£Ej®f’’'^i' 2004 1:59 PM 
To: l| I (UD) (FBI) 

Subjwc: uiu :>ediue*h'ortland DCS-3000 Lease Line 


NON-RECORD 


-b2 

h"!V:. 


we have left up the lease line betwee n Seattle and Porttand that was previously used fw the DCS-3000, just in 
case we had problems with the new ! jn etwork. Since everything seems to be working fine with the new network, 
we are going to take down the old circuit. There is no activity on the modem, so it looks like there is nothing using that 
line. I just wanted to double check with you that there is no further need for that line. Let me know. 


^ seams 
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s 



From: 

Sent: 

To: 

Subject: 


V/.'C 



lOTD) (FBI) 

I ~1(SE^ (FBI) 

^^SSiDSSSl^i,^SSiS£0!CI^^ - 2004 1 :59 PM 
I I ITD) (FBI) 

Uid Seattie-Portland DCS-3000 Lease Line 


•PWLLMSSII I6P 
NON-RECORD 


L,2 
\-y: F. 


VB halve left up the leas e line be tween Seattle and Portland that was previously used for the DCS-3000, just in case 

we had problems with the nevt l T network. Since everything seems to be working fine with the new network, we are 
going to take down the old circuit. There is no activity on the modem, so it looks like there is nothing using that line. I just 
wanted to double check with you that there is no further need for that line. Let me know. 






[ 


From: 

Sent: 

To: 

Cc; 

Subject: 


bo 

ib7 


1 (OTP) (FBI) 

[ 


J (tTO) (FBI) 


W.:^nPsH3v 01 , 2004 1 :33 PM 

KSF) (FBI) 

JlTD) (FBI) 


RE: SF 56K Circuits 


unoLAoo i niip 

NON-RECORD 


«a 

You are correct, the 56k to LA and the lease line to Sacramento can both be cancelled. The circuits to the carriers wilt 
need to remain. Please let me Know if you have any other questions. 

b6 

Thanks! u- ; - 

I I 

703 ] 


— O riginal Message 

From j l (ITD) (FBI) 

Sen fc Ueri npcfiau spnrtjpnW 01 , 2004 11:44 AM 
To: I |tTD) (FBI) 

Subject; i-w: bi- sok urcuits 


tfW OiADO i r ttC 

NON-RECORD 
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[ 

[ 


Could you confirm this in the routers and let D now? Thanks. 


nrjfiinalMecgano 

From; |{SF) (FBI) 

Se nt: Monoav. August Z004 5:38 PM 

To J r UD^ (FBI) 

Subject: SF 56K Circuits 


b7C 

h'^E, 


b7C 


NON-RECORD 


jnow that we're on th' 
you told me before that I ha 


ie|___j] can l rj^nr^l thp L A and Sa c 
ad to maintain 


icramento 56K Circuits for the DCS 3000? I believe 
ircuits, I'm l correct? 


UMOLACS i r iBO 




U HCLA Sa ir iBD 


[ 


From: 

Sent: 

To: 

Subject: 


~niii 1 1 1 1 irirn 

NON-RECORD 


IOTP) (FBI) 

I l (SF) (FBI) 


I tTWinTiTTW KK1 


I I 

ITD) (FBI) 

SF 56K Circuits 



b7C 
to / K 


now that we're on the^ 


told me before that I had to maintain th 


kaalcaocei th e la ar^ 


Sacramento 56K Circuits for the DCS 3000? 1 believe you 
ircuits, I'm I correct? 


-i-tw^mcgiciFn 


S 
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From: 

Sent: 

To: 

Cc: 

Subject: 


I U n) (FBI) 

liTD) (fM 

-— . IfHNWFBli 

> HN1 fFBIV I 
FW: Trip to Vegas 


1 (HN) (hbl){ 


1tD){FBI) 

TfHNVfFBh: 




N 7 {FB 1 ) 


1 


mmi niffffin rn 

NON-RECORD 


Just got the forwarded e-maiLllaatthe subject of a T-3 is traveling to Vegas Friday. Question, will th ^ f ollow hi m and 
can we get the audio off th j j jlrect connect? If so. how do we configure our D CS 3000? I havepiaceb a call to | | 

Partners (they were closed tor tne day) and left a voice mail wittf {advising them of the impending travel ot 

the subject. I think that we will still get the CCC off the interconriect tc^n pnonej and believe that the pen data off the CDC 
will remain the same. 


We have a 56 Kbs line established wit 
you need a RMS? 



ut don/t have the modem yet for both ends. Could you send us a pair - do 


Please advise. 


FBI ' Honolulu 


bfc 

b7C 


{8od b) 

(804 t) 

Original Megsaoe 

Ft^mt l ^ N) (FBI) 

Se nt! Tuesday, A ugust 17, 2004 2:31 PM 

Tol I (HN) (FBI) 

Subject; FW: Trip to Vegas 


'ONC^SIElgB. 

NON-RECORD 


b;i: 


b7E 


Can you please ca 
back to him. 


Ind take care of this for me. 



L6 

tr,'7v:; 



know you will be the one getting 


Origingj_J1^2Slfci;^_^_ 

From: I U N) (FBI) 

Sent: Monday, August 16, 2004 3:44 PM 


SB^T 


332 


Toi 

Subject: Trip to Vegas 


JhN) (FBI) 



6 


b7C 


UMOLAOOtr i BD 

NON-RECORD 


Our main targe l traveling to Vegas | 

while in Vegas, * 

You toW me you needed advance notification for these trips. 
We are not sure of his return trip date, yet. 

Let me know. 


I 


Tthis 


Friday. We would like to intercept his calls 


h2 

be 

f'C 

t7i 


UtteM«&!i!ED 


imri ^nrir irn 


I t>TD) (FBI) 


From: 

1 1 fMPl (FBI! 

Sent; 

MnnHaw Aiinnct Ifl 0004 4 0 PM 

To; he 

1 (ITD1 (FBhf^ 

b^c 

IfITm /FRI\ 

Cc: 1 

1 kflPt fFBh 

Subject; I 

IWireless Pens 


b2 

y^SSS!«cil. " 

NON-RECORD 


JlTD) (FBI)£ 


] 


Here’s some info on the setup for the pens: 


(S) 


bl 


We have the modem h ooked up to the satellite DCS-3000, IP addres 

I I 


the computer i$ running with 


□ 


The POTS dial-up into th j S witch is l ~ 
has completed his portion - I'll Call him later (I just got back from Bemidji). 


Jit is installed and operating. I do not know ifthej Switch tech 


There will be two pens,[ 


PEN/T&T order. The order authorizes the interception of "post-cut-through digits..." andl 
after} the call. ' 


1 has bee n provided with a copy of the 

^luring (and 


b£ 

t-7r 
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I'il be going back up north tomorrow, but I should be within range o| 
Thanks. 


Notes fo | I fc ■ 

The POTS line that allows the DCS-3000 satellite modem to dial out t J I t is on pair 41, block 40, It is 

patched frorngutjeMOJhro^ \^-lll cable 313 to the monitoring room. The modem is sitting on top of the computer. 

The numberQ_^^__jhas been switched to a business calling plan that costs $39.99 per month with a maximum long 
distance charge of $20.00 ^r month. This will allow us to dial up 24 hours without getting killed on the bill. 1 wrote this 
note in case l don't see you tomorrow. 

P.S. I miss you. XOXOXOXO 


imiiLAiJIFTED 


(OTD) (FBI 


From: 

Sent: 

To: 

Cc: 


llTD) (FBI) 
004 2:52 PM 
](ITD) (CO^ 
(ITD) (FBI);L 


(ITD) (FBlj 


Subject; 

Importance: 


DCS-3000 One Way Push Accessories Needed for CY04 Closure 


NON-RECORD 


The fbllowmg list of accessories perteins to the request I made to you in the hallway. The items below shall help us utilize 
the remaining DCS-3000 One Way Push machines for CY04. Future systems and accessories should be funded through 
FYOS budget (t Hope). If you can provide the funding for the list below, it would be truly appreciated by the SBIT team, as 
well as myself. Please let me know if you can handle all or any portion of this request. 
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From: 

Sent: 

To: 

Cc: 

Subject: 


h6 


£ 




□(Sect 

I^D 

3uiaeline 


(SecD) (CON) 
:23 AM 

ITD) (FBD 

(FBOr^ 


RE: New Security Guidelines (7/22704) 


]<ITD) (FBI) 


itnri ftffgiggft 

NON-RECORD 


I 1 

These requirements are news to me. I will research and hopefully get you an answer by COB today (Aug 16). 


Respectfully, 


CU, l^ 

( 202 )|_ 


Seciirih/ Divsinn 


f 



— O riginal Message — 

Promt 


J(ITD) (FBI) 


Se nt: Friday. August 13 2004 4:04 PM 
Tol (SecD) (CON) 

Cc (UD) (FBI);C: 


SubjME! N6W b&l!urify tuidellnes (7/22/04) 

Importance: High 


XlTD) (FBI) 


‘nHILLAaUII 

NON-RECORD 


c. 

h'?:: 


b2 

I've been informed that the Security Guidelines have changed, dated 7/22/04. There are several areas that affect ^ 
recent and future installations for the DCS-3000 One Way Push. Three of the biggest impacts are as follows; 

1) New marking procures defined to place FBI-approved tamper-indicating seals to secured r~| switches covering 

335 


SECRET 


seams on the forward portion of boti 



of the device. (How can we get large numbers of Uiese seals ASAP?) 


2 ) Screen Savers must display max classification level. (All systems shall require updating in order to meet theis 
requirement.) 

3) Maintenance of accountability and records oi l I switches installed, user names, name, model of switch and serial t " e 
mimhfir anri thp levels connected. Info must be available for any reporting upon request. (This will require 

[ since ifs a new requirement. I'd prefer to have this information entered into a database as we discussed 
months ago? What ever happened to the development of a Classified version of the DCS-3000 database?) 


There is considerable work required to go back and re-engineer these requirements to the previously installed 
equipment. Also, there are many new installations occurring wkly. We will have to retrofit systems, image profiles, and 
certainly need the required "FBI-approved tamper seals" required for this effort. Please let me know if you can help 
expedite the tamper seals to ERF. 


In the future, notification of changes would be helpful! Significarit changes to those practicing security procedures for 
ERF and the field should be distributed to it's users. Without the proper notificatiom we would not be compliant with the 
new security guidlines. Please let me know so that I can start retrofitting our deployed/deploying systems. 


[ 


Regards, 

70^ 


w<ei Afffinea 


[ 


From: 

Sent; 

To: 

Cc: 

Subject; 


lb 6 
b7C 


](OTD) (FBI) 




](ITD) (FBI) 


Friday. August 13. 2004 4:12 PM 


RE; New Security Guidelines {7/22704) 


ilTD) (FBI)C 
frO) (FBI);r 
felines (7/22/1 


Importance: High 


l(SecD) (CON) 
3ITDHFBI) 


NON-RECORD 


b;:: 

b7£ 


Also, what is this i l User agreement? I was unaware that traing and signatures are required by ALL users. Whafs our 
next step? 

b6 


I n 



From ! Tf lTDI (FBI) 

Sent: Friday, August 13, 2004 4:04 PM 


S^ET 
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(HD) (FBI) 


E 


To 
Cc 

Subject: New security (Guidelines (7/22/04) 

Importance: High 


3 

(SecD) (CON 
(ITD) (FBI)r 




Ir.C-, 


U H0LA 8 9 IPI CD 

NON-RECORD 


I've been inforFned that the Security Guidelines have changed, dated 7/22/04. There are several areas that affect 
recent and future installations for the DCS-3000 One Way Push. Three of the biggest impacts are as follows; 

1) New marking procures defined to place FBI-approved tamper-indicating seals to securec(L__Jwitches covering 
seams on the forward portion of both sides of the device. (How can we get large numbers of these seals ASAP?) 

LI 

2) Screen Savers must display max classification level. (All systems shall require updating in order to meet Iheis b . 
requirement) 

3) Maintenance of accountability and records [ /itches installed, user names, name, model of switch and serial 

m^Tiberj_and the levels connected. Info must be'9V<tllctDle for any reporting upon request, (This wilt require 

|sinc6 it's a new requirement. I'd prefer to have this information entered into a database as we discussed 
monins a^o/ What ever happened to the development of a Classified version of the DCS-3000 database?) 

There is considerable work required to go back and re-engineer these requirements to the previously installed 
equipment. Also, there are many new installations occurring wkly. We will have to retrofit systems, image profiles, and 
certainly need the required "FBI-approved tamper seals" required for this effort. Please let me know if you can help 
expedite the tamper seals to ERF. 

In the future, notification of changes would be helpful! Significant changes to those practicing security procedures for 
ERF and the field should be distributed to its users. Without the proper notiflcatiom we would not be compliant with the 
new security guidlines. Please let me know so that I can start retrofitiing our deployed/deploying systems. 


I 


Regar^ 

763^ 


ib?: 

ibIC 


UNLLAaaiPIEU 


**Wefa4gSIEIED 


s 



T 
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From: 

Sent; 

To: 

Cc: 

Subject: 

Importance: 


OTD) (FBI 


■ llTD^ (FBI) 

Fririatf August 13 ?C>fU 4:04 PM 
l(SecD) (CQI 

|ITD) {FBI)X 

New Security Guidelines (7/22/04) 


(ITD) (FBI) 


NON-RECORD 


I've been informed that the Security Guidelines have changed, dated 7/22/04. There are several areas that affect recent 
and fuKire installations for the DCS-3000 One Way Push, Three of the biggest impacts are as foliows; 

1) New marking procures defined to place FBI-approved tamper-indicating seais to securec T |> vitches covering seams 
on the fonvard portion of both sides of the device. (How can we get large numbers of these aSSirAsAP?) 

b; 

2) Screen Savers must display max classification level. (All systems shall require updating in order to meet theis ^ ' 
requirement.) 

3) Maintenance of accountability and records o | ^ witches installed, user names, name, model of swit ^ and serial 

number, and the levels connected. Info must be available for any reporting upon request. (This will require ! I 

since ifs a new requirement. I'd prefer to have this information entered into a database as we discussed nionths ago'/ 
What ever happened to the development of a Classified version of the DCS-3000 database?) 

There is considerable work required to go back and re-engineer these requirements to the previously installed equipment. 
Also, there are many new installations occurring wkly. We will have to retrofit systems, image profiles, and certainly need 
the required "FBI-approved tamper seals" required for this effort Please let me know if you can help expedite the tamper 
seals to ERF. 

In the future, notification of changes vrould be helpful! Significant changes to those practicing security procedures for ERF 
and the field should be distributed to ifs users. Without the proper notificatiom v/e would not be com^iant with ffie new 
security guidlines. Please let me know so that I can start retrofitting our deployed/deploying systems. 



S^ET 


S®l 

1 (OTP) (FBI) 


ET 


From: 

Sent: 

To: 

Cc: 

Subject: 


[ 


E 


Ihuisdast. August V2 )! UUJ9:15 PM 


liSC) (FBI) 
^(JT9:15 
llTD) (FB I) 


DCS 3000 AT OFFSITE ANE^ 




I 


h;: 

b7i; 


UH C LMS IPiefr 

NON-RECORD 


The DCS 3000 is working fine at the main office. Are there any special procedures or notifications that need to be given if 
Sacramento Division turns jka nr.R :^nnn riionr at the offsite? After seeing the phone bill for the connection between 
the offsite and the main office! ftfould like to turn it off and save a few bucks. 


Also, regarding an _ 
problem on the othei 
to you. Call if you 


UNULAAAIHbU 


hej ^^^H in 
I have any so 


roblem, I have been notified by a language specialist that he is seeing the same bleed over 
"ine we are intercepting. I listened to it and it is simi tar to thp on thc» rn that wac mailed 
hysolutions, questions or need more samples. Thanks^ 


3' 




b-? 


[ 


From: 

Sent; 

To: bo 

jb'/ 


Cc: 

Subject: 


loTD) (FBI) 




TOl 


1(110) (CON) 
^04 3:48 PM 






(!TD) (C0N)T"' ' . 

IITOI (Hj lif 




1'TDWFBI^^ 


TlTDtfFRJkl 

^.^{iTonPEi)! 


RE: EdStTUftSmSnSfT 


JITD) (CON) 


(ITD) (FBdC 




llTD) 


3Qvl.0.Agencta.clo 
C (70 KB) 

tffjffhASTinrn 

NON-RECORD 


Confirming the schedule for the Orientation and sending an updated Agenda. 

I ~| willygu_^ available to brief DCS3(X)0 at 1:45-2:15? Please advise if your schedule will allow you to 

participate. As | [ mentions, your involvement has enhanced the assimilation of new employees to the EOSO Program 
and is greatly appreciated by the entire team. 


Please call me with any questions or comments. 


Thanks 

540| 




bri 

L7C 


PwcLADOirtfig 
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T 


NOW-RECORD 


ET 


Our next new employee orientation is quickly approaching. Your involvement in the past has been an important factor to 
the overall success of the orientation and I hope that your schedule will allow you to participate again. The technology 
manager portion of the program is scheduled on Wedr>esday, 25 August from 1:45-2:45 and 3:00 to 4:00 (a short break 
scheduled between sessions). Please let me know if you {or a designated alternate) vtrould be available as noted below. 
Thanks in advance. 




Lcaaoap 

I Biyyit * 
DCS5000 
DCS6000 



I (confirmed) 
lerger (confirmed) 




b:/ 


‘agsinr 


]has done this for us previously. Please contact me at your convenience to discuss. Thanks 


I 

E/s ctmnic Sun/si l/anca Operations Support Office {EOSO) 

54tfZZ_J 


Lb 
L 7C 


U NC C BSS tFIED 


i mcLAOCir i c D 



loTD) (FBI) 

From: 

Sent; 

To: lL(-: 

Cc: to'c 

|. (CE) (FBI) 



|(ITD) (FBI); 
IfCEWFBn 


jrO) (FBI) 

Subject: 

DCS 3000 system Raleigh 




UNC.LAS3 I F I E B 
NON-RECORD b;. 

L7C 

I 1 

We recently had some lines switched over from Charlotte to Raleigh on the DCS 3000 system. That system crashed in 
the last couple of days and I had to switch out to a new DCS 3000 system. 

Could you guys call into the system to reconfigure the system to start receiving the data again. The DCS 3000 system 
software might need updating, I don't know. I don't think this machine has been used previously 

The help number to call into the machine is 

The password of the DCS 300 system is : f ^ all lower case letters) 

Thanks 


sfMt 
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TTA 

Charlotte/Raleigh RA 





From: 

Sent: 

To: b 

l-j 


Cc: 

Subject: 


]OTD) (FBI) 

I 


]lTD) (CON) 

Tuesday. August 03. 2004 3:35££L ■ 

Virn^ fFRhl iiTm /FSnl 

I flTDl (FBn: l I fiTDI (FBOF 




(ITO) (FBI);f 
EOSO Orie^ 


IflTD) (FB I) 




(ItD) (FB1);[ 


Jmi 




ancLrtSsiFiLu- 

NON-RECORD 


Our ne>ct nevy employee orientation is quickly approaching. Your involvement in the past has been an important factor to 
the overall success of bie orientation and I hope that your schedule will allow you to participate again. The technology 
manager portion of the program is scheduled on Wednesday, 25 August from 1:45-2:45 and 3:00 to 4:00 (a short break 
scheduled between sessions). Please let me know if you (or a designated alternate) would be available as noted below. 
Thanks in advance. 


DCS300Q 

Break 

DCS5000 

DCS6000 


dgaiJi! 


bG 

fc7 


fc7P 


has done this for us previously. Please contact me at your convenience to discuss. Thanks 


I I 

Sf ^tronic Survsitt anc^ Operations Support Office (EOSO) 


uui-i Accicicn 


IbG 

b7c 
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^TD) (FBI) 


^|iET 


From: 

Sent: 

To: 

Cc: 

Subject: 


C 


E 


I nnrrf Hn in 


Hb: LJ(jy-yUU(J Une Way 


llTD) (FBI) 

4 4:00 PM 

lip) (FBI)r“ 
^{ITD){f^ 


(ITDHf 
ush Accessories Needed 


]lTD) (FBI) 


U^CMetPtOT 

NON^ECORD 


\zz\ 

Are these cords the same cords|^^^_^^^J(ras talking about? If so he has ordered some using my credit card. 

Thank ^ | 

Original Message 

Fron J If lTD) (FBI) 

Se nt; Thursday, July 22, 2(XH 10:19 AM 

To ! lITD ) (FBI)I l(rTD) (FBI) 

Cc f I flTD) (FBTl 

Subject: DCS-3000 One Way Push Accessories Needed 

Importance: High 




■ U l llgLACGir .lBa 

NON-RECORD 


1 I 

To date, we've shipped twenty-seven DCS-3000 One Way Push packages, I currently have four new systems ready to 
ship, but I lack the following items: 


b7r 

bz 
h7E 

Generally, I send one each of items #1 , #2. and #5, and three each of item #3. #4 is for exceptions to the rule, rarely 
used. 


□ 




Not sure how man' 
Not sure how manl 
Not sure how man 


Future Stock Pi les 

loxes remain. There seems to be an ample amount for now. 
J^itors remain. There seems to be an ample amount for now. 
jemain. There seems to be a fair amount for now. 


Do we know w4iat the total number of One Way puch packages required to field? 


S^ET 


342 



If you can order the following items I would be truly grateful. 



hG 


U II OLAQO I F iefr 


UN CLA SSI F I ED 


I 


1(OTD) (FBI) 


From: 

Sent: be 

To: 

Cc: 

Subject: 


I l lTD) (FBI) 

Thursday, July 22 . 200 4 10;19 AM 

I ~^(1TD) (FBI l t lTD) (FBI) 

r _ ’ 1 (itd)TO 

DCS-3000 One Way Push Accessories Needed 


Importance: High 


NON-RECORD 

;L'.. 


To date, we've shipped twenty-seven DCS-3000 One Way Push packages. I currently have four new systems ready to 
ship, but I lack the following items: 


ib2 


□□ 


Generally, I send one eech of itenns #1 , #2, and #5, and three each of item #3. #4 i$ for exceptions to the rule, rarely used. 


*****»****<Hw*****iMMTirt**L»*#* FutLirp Stock Piteg *********** ** *** ****** 


Not sure how manv l remain. There seems to be an ample amount for now. 

Not sure how manij^^^^^^^jujyjjonitors remain. There seems to be an ample amount for now. 
Not sure how manj |remain. There seems to be a fair amount for now.' 

****************#****i*lii^^^mwnwwwwnFwnBBBBwiBl****** ************** ********* 


Do we know what the total number of One Way puch packages required to field? 


If you can order the following items I would be truly grateful. 


3^3 


ITD) (FBI) 


From: bo I . . , (FBI) 

Sent: b e Thursday. July 08 2QQ4 1(3:51 AM 

To; I K ITD) {FBI)f 

Subject: FW; FISA Pen Register Data 


Pen register data dis cussion witff l E - DLsciwslnn w ith sf : Discussion Results frotnl l lw.qif f5 KBl 
for FISA r^. [ ^ [ | f j I ^ 

itHoi ^cftnrn t-r- 

NON-RECORD 


SENSITIVE BUT 


Any ideas? 

— O riginal Message 

From I r iTDI (FBI) 

S ent: Wednesday. Jul y 07, 2004 J-44 pm 

u t np) (FBi)J 


(FBI) 

Cc;t 


□(ITD) (FBI) 


Subject: FW: RSA Pen Register Data 


](ITD) (FBI){ 


J (UD) (FBI); | "k riD) 


SENsmvE **i*^inFrf 

NON-RECORD 


b;j 

Guys, b-^a: 

The question continues to pop-up, how does the field handle FISA information; classified, or 
unclassified? Can we develop a proc edure reco rding the proper handling and transfer of data thru 
the DCS-3000 One Way Push into thd Dr use an alternate approach? 

I h oentioned the possibility of using EDMS for each region and automajically download the Tet 
Apps. This may be a viable option? More details will be need for a discussion. 

Other suggestions? Any way to provide the field with an answer? 

ho 

b-c 

S^T 
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'ednesdav. Jui 


ITD) (FBI) 


From: 

Sent: 

To: 

Subject: 




DCS3000 


(ITD) (CON) 

Iv 07, 20U4 4:51 PM 

ItlTD) (FB!);|__; 
van 


^ITD) fl 
integration with|^^^ vs 



Van Integration 
Framing deck.p... 


SENSrriVE BUT UhlCLACOlPIgP 


NON-RECORD 


ij-fiP’ 


Hell d I 

I am heipin j I mplement the linkage between the DCS3000 and the | S urveillance vans, and some of us would 
like to meetwlin ysli to ask you some questions. I attached a few pictur^ THSt r generated with associated questions that 
need to be answered. In particular, slide 4 - Terrestrial architecture focuses on the vans interface to the DCS3000. 

Are either of you two available for a half hour Friday afternoon or sometime next week? 

Thank you. T 

I I 


S^ET 


34S 





3 ? 


SOTRET 


SENSmVE BUT liMULAa^int.D 




VOTD) (FBI) 


From: 

Sent: 

To: 

Cc: 't 


Subject: 


DtD) (FBI) 


E 


TiiAsrifly .iiilvOfi 7flfUA- 1 2 PM 




_kQ) (FBli 

TiTfiwFBnr 


JTTDnFBir 


]tD) (FBI)[ 


1(ITD) fCoJ 


DCS-3000 One Way Push 


](ITD)(FBI):[ 




o wamoo i r iBp- 

NON-RECORD 


Just a Heads Up: 

Soon, you'll be receiving the equipment for the DCS-3000 One Way Pu^. Please put in a safe location. We'll be 
contacting you to schedule a visit to your field office on 13JUL04 (Tues) in order to complete &ie installation process. 
We are unable to activate this equipment at the present time. However, v/e will be better prepared when the system 
is approved on by our security o^e. 

Thanks for your cooperation and feel free to contact us if you have any questions. 


[ 


Regard^ 

M t l in 

70^ 


1 

] 




bo 

fc'/C 


Cc: 

Subject: 




From; 


1 

Icr 

Sent: 


1 nursoav. Juiv m* m , 

To: 


1 

rrifNYi fFBiii 


lb 6 

(FBDI 



bTC 

fNYWFBI\ 



](NY)(FB1) 


1INYII£B!)[ 


jpY) (FBt);[ 


Inyi 


V ,.l I 

u-1 / | [ Wireless jntercept 


](NY) (FBIjT 


](1TD) (FBI) 


SENSITIVE BUT UMOLACfiiriBD 
NON-RECORD 


Gentlemen, - , 

Ajmg 5 j 2 igj_JJiis target, according to source information, utilizes th j | f eature. I have been in contact 

vwthl l ERF. and have been advised that we will most likely be the nf&t irt iftfe btu reau to do this type of intecept 

use a separate DCS3000 to r;gutgJli£^|jdio,| 
land then into VoiceBox just like al i nruir 

visea me mat tnefe ^/SUir^^wSys Of getting this audio from the CMP/26 to BQ. The first choice would be to 
use the T-span, solely dedicated to this intercept The second choice would be using the ISON lines, i do currently have 
one ISDN line at BQ, We would have to have a open connection between my ISDN lines and the CMP's. I am trying to 



bb 

t. 


sSb^et 


346 


S^ET ^ 

get information as to the cost involved in h^ing the line open 24/7. The third choice would be a 56K dedicated circuit. 

a »ep you advised as this should be educational. 

Please correct me if I misunderstood anything I listed above, 
vou, , , 

1 914 ^ 


NSITIVE BUT 




Just a Heads Up: 

Soon, you'll be receiving the equipment for the DCS-3000 One Way Push. Please put in a safe location. We'tl be 
contacting you in the near future to schedule a visit to your field offtce in order to complete the installation process. We are 
unable to activate this equipment at the present time. However, we will be better prepared when the system is approved on 
by our security office. 

Thanks for your cooperation and feel free to contact us if you have any questions. 



70 




Just a Heads Up: 

Soon, you’ll be receiving the equipment for die DCS'3000 One Way Push. Please put in a safe location. We'tl be 
contacting you in the near future to schedule a visit to your field office in order to complete the installation process. We are 
unable to activate this equipment at the present time. However, we will be better prepared when the system is approved on 



347 


by our security office. 



Thanks for your cooperation and feel free to contact us if you have any questions. 




Subject: RE: One Way Push install Plans 



It is good for us. See you end of August. 



be 

b'^C 

AOOICICn 

NON-RECORD 


I wanted to tentatively schedule a visit to your island in order to install the DCS*3000 One Way Push. We are hoping to 



348 


perform the necessary installation on 
know if this works with you and vour 1 
welcome to call my phone at 703j 


>n tne fol 


following dates: Aug 26, 27, & 30. Travel days on Aug 25 & 30. Please let us 
1 . I'l l be in training next week, and in Houston the week following. You are 
|ril talk to you in a couple of weeks. 


Regards, 


U iJfiLAQ3 IPIgD 


UMLLASblUfcU' 


OTD) (FBI 


From: 

Sent: 

To: 

Cc: 


Subject: 


ir iTnt (FBI) 
10, 2004 3:57 PM 
ilN)(FBI) , 


|ITD) (FBI)^ 


)ne Way Push Install Plans 


NON-RECORD 


I wanted to tentatively schedule a visit to your island in order to install the DCS-3000 One Way Push. We are hoping to 
perform the necessary installation on the following dates: Aug 26, 27, & 30. Travel days on Aug 25 & 30. Please let us 
know if this works with you and your team. I'll be in training next week, and in Houston bie week following. You are 
welcome to call my phone at 7031 ll'll talk to you in a couple of weeks. 


UNCLASSIFIED 


SEOftET 



6/2/04: Travel from Washington/Reagan National airport to Newark Liberty airport; Continental Fit# 3218 
Hilton NewarkAirport908-351-3900 
6/3/04: Field Office 

6/4/04; Travel from Newark to National; Continental Fit # 0605 



NON.RECORD 


All, 

It was brought to my attentbn that some field offices lack room or racks to house this equipt. If you ha^e am/ rmagtipng 

regarding the DCS-3000 One Way Push, or if you need additional equipt {ie Racks), please contad i p r 

myself. We will do our best to accommodate your needs before completing the final irrstaiiation at you 



350 


wiOL^gginrp 



}OTD) (FBI) 


From: 

Sent: 

To: tv;, 

Cc: 

Subject: 


c 


3iTD) (FBI) 


Friday Mav28. 2004 1:47 PM 


I I 

DCS 




jpmpBil IrhJ 

fFB I 


-3000 One Way Push 


JITDXCON) 


JITD) (FBt)l 


ltSL)(FBI) 


NON-RECORD 


Just a Heads Up; 

Soon, you'll be receiving the equiptment for the DCS-3000 One Way Push. Please put in a safe location or contact us if 
you would like to irtstall the equipment in advance. We are unable to activate this equipment at the present time However, 
we will be better prepared when the system is turned on by our security office. 

If we don't hear from you, we’ll be contacting you in the near future to set up a visit to your field office in order to complete 
the installation process. Thanks for your cooperation and feel free to contact us if you have any questions. 




] 


TICIU 

703 


b '0 
b7C 


‘TTirin 


[ 


From: 

Sent; 

To: 

Cc: 

Subject: 


][OTD) (FBI) 

I IflTDt (FBI) 

IbSWFbI ^BSHFBh 

l lTDWFBh l i (ITD) (FBI) 

cancel of old DCS-3000 circuit 


UNCUSSji!Ea 

NON-RECORD 


Hey yalt, 

i talked it over vrith the guys here and yall can cancel that old lease line circuit to New York. Your new DCSNET circuit 
seems to be stable and working well. 

If yall have any questions or problems, give us a call. 

Thanks! 


lb 6 


b7C 
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From: 

Sent: 

To: 



U HQLAQQ i nCD 

NON-RECORD 


Just a Heads Up; 

Soon, you’ll be receiving the equiptment for the DCS-3000 One Way Push, Please put in a safe location or contact us if 
you would like to Install the equipment in advance. We are unable to activate this equipment at the present time. However, 
we will be better prepared when the system is turn on by our security office. 

If we don't hear from you, we'll be contacting you in the near future to set up a visit to your field office in order to complete 
the installation process. Thanks for your cooperation and feel free to contact us if you have any questions. 




OTD) (FBI 


From: bG 

Sent: ;i . : r 

To; 

Subject: 


| DL)(FBI) 
STO7741 PM 

J{ER) (FBI) 
Evidence 


Pen Register 
Evidence.doc (57 

NON-RECORD 


I I any progress in addressing my suggestions? I would like to change our procedures as soon as possible- 

O rlQinal Message t ^ 

Fromr |DL)(FBI) In : 

Sent: I uesday, narcn ib, 11:52 AM 


SE^T 


352 



The attached document details the current procedures Dallas uses that pertain to pen register evidence, it also outlines 
the procedures we will implement in the near future and some suggestions for ERF to help us move in that direction. 
Please feel free to share this info with anyone else you see fit. 

Once 1 receive any comments from ERF and And out if our requests can be implemented, [ will prepare a final detailed 
description of the new procedures for Dallas's use and you can post them on the DCS 3000 web page. 

Please contact me if you have any questions or suggestions. 



NON-RECORD 


I Icalled and asked for a list of any technical topics that may be discuss ed at the m eeting so he can have his 

' TAIKS fJTSpdfe answers waste less time. Recommend items/issues be fonvarded lo | I 

I ^Iso asked wlietbeL,1 ) if d be possible to discuss the wide band micropho ne defin ition issue an d 21 pro vide the 

‘"5PSCiraniS*demo/Q&A t j | The demo can be done before or after the meeting. |~^ plesae advise | ^ if you're 
available on Wednesday. ' ' 



353 


SE^T 



uHQuiao l P tep 

NON-RECORD 


All. 

Raytheon will be here this Wed (5/12) @ 13:00 in the Lobby CR. You attendance is appreciated. 


thnx, 


h6 

Iv-c 


— OrjoinaUtlfissaflessi^ 

From j^ 


IeR) (FBI) 


■ER) fFBOn 







(ER) (EBI)| 

Subject; Schedule Mtg w/Raytheon (DCS'3000/5000) 


IssumL 


] (ER) (CON) 


](ER) (CON)l 


bauEBui 



" nnLLAutiiiiieo^ 

NON-RECORD 


Alt; You are cordially invited to attend a meeLng not yet determined. 

Where: ERF 
When: May 3 - 7? 

Time: ? 

Subject: Dev^op capability to correlate CCC/CDC data for DCS-3000/5000 


Last Wednesday, I spoke witt l I from Raytheon, and discussed the nee d to d evelop a sound, 

bfj reliable solution to correlate the CDC/CCC data for the RedWolf and the DCS-3000. 1 i wiH not be available next 

)[^ 7 ,- vi/eek, but the following week appears to be open. What day and time is best for each of you during the week of 

May 3-77 Please send me your requests and make sure that you include more than one choice. I will coordinate 
what works best for the majority. Thanks so much. 


PS ^^_^_^nformed me tha t! l have made the decision to begin developing "A Time 

Based Correlation" for now. I don’t have any details about how ttits algorithm is actually calculate. We can 
definitely get more specifics at our meeting. Is this the direction we wish to go, or are there other ideas? This is 
what we need to discuss. Please ponder on this. Thanks. 


Later, 

-c 


S^ET 


354 



All; You are cordially invited to attend a meeting not yet determined. 

Where; ERF 
When: May 3-7? 

Time: ? 

Subject: Develop capability to correlate CCC/CDC data for DCS-3000/5000 




355 





to 6 
t7C 


SI 


T 


b“E 


Last Wednesday, t spoke witl | ^ | from RayJlieoD-afld discussed the need to develop a sound, 

reliable solution to correlate the uuu/uuu data for thj land the DCS-3000. Art will not be available next , 

week, but the following week appears to be open. What aay ana time is best for each of you during the week of May 3- 
7? Please send me your requests and make sure that you include more than one choice. 1 will coordinate what works 
best for the majority. Thanks so much. 


PS I T informed me that l ^ have made the decision to begin developing "A Time Based 

Correlation" for now. I don't have any details about how this algorithm is actually calculated. We can definitely get more 
specifics at our meeting. Is this the direction we wish to go, or are there other ideas? This is what we need to discuss. 
Please ponder on this. Thanks. 

i;" 'T; 
b7C 

Lalec. 


UnCLASSII IhU- 


[ 


From: 

Sent: 

To: 

Subject: 


1 (OTP) (FBI) 


c 


^ER) (CON) 
Monday MavQ3 7QQA 1:45 PM 
I ZLEBIIFBI) 

VW: IICIU Item [deport 


NON.RECORD 




— Or iginal Message — 

From J I fER) (CON) 

Se nt! Thursday. April 29. 2004 11:37 AM 
To ! I (ER) (F BI) 

Cc i _ER ) (FBI) 

Subject: TTCTU Item foil Report 


UUCWSSIF(i» 

NON-RECORD 


bo 

b7C 

TIC TU Item fori I Repo rt 

Re: I r esistance with Kidnapping Case 

The Mobile FBI offi ce was req uested by the Mobile Police Deoai ^ent (MPD ) to assist them in 
tracking and locating \ j old male subject who had enticed a | I female over the 

internet to meet him for sexr The girl met the subject willingly and had been missing for ten days 

356 


SE^T 



St 

before the FBI was called. The MPD became concerned about the safety for the child after 
conducting search warrants and interviewing the subject who refused a polygraph. These concerns 
were compounded when a family member of the subject surmised that the subject would when 
caught kill the child and himself rather than face prosecution. 




I r he young girl was recovered without any further harm. The target was 
arrested on charges involving rape (the girl was younger that the legal age of consent), interstate 
travel with a minor for sex and will most likely face federal charges involving the internet. 

Thanks again for your assistance, patience and long hours that you worked on Friday evening. 
Your assistance was most helpful to us and allowed for the best possible resolution of this matter.... 



miLLMASIFIgP 




From: 

Sent: 

To; 

Subject; 


[ 


]eR) (CON) 


Monday. Mav 03. 20 04 1:43 PM 
D(EF 


|(ER) (FBI) 


FW: Monthly submission for Directors Report... 


'mcMfisigiEQ. 

NON-RECORD 


I t - would you mind condensing the information with the "meaf sir>ce you understand the importance of this. I'll forward 
the inrormation in foe next e-maii. thanks. 


— Original Messaoe- 


Froml 


]£R) (FBI) 


Sent: Monday, May 03, 2004 12:5Q PM 
To | (ER) (GOk)J^ 

\ Cl 


Cc: OJFFORD, MICHAEL (ER) (FBI)' 


]eR) (FBI) 


hlC 


3S7 


S^r^ET 




S^OBET 

Subject: Monthly submission for Directors Report. 




OWLmaJii tfc.D 
NON-RECORD 


I Mr. Clifford said your submission is great but all we need is a few lines that captures it for the 
Director if I may, this is a suggestion from me..., j'.,- e 


"Request for instaliation and training on the DCS 300' 
enforcemnet officials in an ongoing case." System w. 


tern at the Mobile Fieid Division to assist law 


, suspe 


This is only a suggestion but with so may Units within 4 Sections submitting to this report.. ,,1 beiieve we just need what 
they call "the meat" of the case. 


Anyway... I'm stili "compiling" but hopefully will be thro 
Clifford and myself this afternoon, I'll add it ThanksJ 


jjQh soon^ 


after lunch so if you could rewrite and forward to Mr, 


U NCLAsa ir i eg 


OTD) (FBI 


From: 

Sent: 

To: 

Subject; 


config 


J(ER) (FBI) 
,3:21 PM 
ICER) (FBI) 


LEA CALEA Router LEA CALEA Router WA LEA - CALEA CALEA Router 
Config Recotnm... 0>nfig_Help f... Informaton.do... Tdering Recommei 

NON-RECORD 


Ema il fi 

1 _> 


il from 
k)C (32 KB) 


— O riginal Message — 

From ! I (SE) (CON) 

Sent: Friday, April 30, 2004 2:59 PM 
ToJ tR) (FBI) 

Subject: RE: T1 config 


NON-RECORD 


SECHlT 



OK I have no idea what T 1 your talking about. Is this frorr i ^ T 1 for audio int4^_^_^IVoiceBox, or Pen info for 
the DCS3000? Either way I hope these files might help. If they don't please let me know which T1 or circuit your talking t ^2 
about and whafs it for. 


CD 


From :! l ERt (FBI) 

Sent: FridatLAoril 30. 2004 8:07 AM 
To ! I (SE) (CON) 

Subject: T1 config 


NON-RECORD 


Can you tell us whether the T 1 is PRl or BRI? 


biS 


um^ssisjESi 


rn irirr 


3S9 


T 


[ 


From: 

Sent: 

To: 

Subject: 



IfOTD) (FBI) 


lUraS feTzIL-T. Rflf iTSTTI Kf: 


FW: U & N’s 



(MN) (FBI) 
4:33 £M^ 
(FBI)^_ 


](ER} (FBI) 





085304,119 (51 ICB) 


NON-RECORD 


Can you answer this question from my analyst regarding DCS 3000 codes? 
Please send your response back to me anj ( 


Thanks. 


6 


— Orifliflaijiigssaflg^-- 

From i | (MN) (FBI) 

S ent; Wednesday. April 28. 2 004 U:19 AM 
To | I (MN) (FBI) 

SuDject: u & n s 



bis 

b7r 


IZZl 

Under the direction portion of the informafion for the DCS-3000 I know the I is for incoming, O is for outgoing, what were U 
& N again? 

I've attached a sample file. 

Thanks! 


"TTni I iririrri 

U N OL*Qai HB» 


seMt 
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From: 

Sent: 

To: 


Subject: 


:b7: 


[ 


^(ER) (FBI) 
Thursday. April 22 2004 1:14 PU 
IPR^ f par 


I _ 

I IfERHFBiC 

F=^ 


ifERTTFsiT 


?ER1 fCONH 

K feRWCONI 
schedule Mtg w/Raytheon (DCS-3000/5000) 


1 fERM FBl£ 


J(ER)(FBI)J 


1 


ER1 fFBhiZ 


]ER)(FBI); 


UHGLAOOlF ieO 

NON-RECORD 


All: You are cordially invited to attend a meeting not yet determined. |..- 

h^c 

Where: ERF 
When: May 3 - 7? 

Time: ? 

Subject: Develop capability to correlate CCC/CDC data for DCS-SOOO/SOOO 


Last Wednesday. I sooke witt i ^ from Raytheon, and discussed the nee d to (fe veloo a sound, 

reliable solution to correlate the CDC/CCC data for the RedWolf and the DCS-3000.|_KII not be available next week, 
but the following week appears to be open. What day and time is best for each of you during the week of May 3-7? Please 
send me your requests and make sure that you include more than one choice. I will coordinate what works best for the 
majority. Thanks so mudi. 


PS i [ informed me that L^^^^_^_^^__|have made the decision to begin developing "A Time Based 

Correlation" for now. I don't have any details about now this algorithm is actually calculated. We can definitely get more 
specifics at our meeting. Is this the direction we wish to go, or are there other ideas? This is what we need to discuss. 
Please ponder on this. Thanks. 


Later, 

-c 


U NCLAsa ifi e p 


SE^T 
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From: 

Sent: bt- 

To: be 

Subject: 


I IfWF^ (FBI) 

Monday April 12 2D(M 4:33 PM 
I l (ER) (FBI) 

training 


UHLLM&AIFieLI 

NON-RECORD 

HeJZZI 

I would like to try to schedule that DCS 3000 training as soon as possible. The 1 day class for theTelecommunications 
Specialists and the longer class for my guys. Thanks in advance. 

-ONOMMiCIgQ. b 

[ 


From: 

Sent; 

To; 

Subject; 


tOTDMFBI) 

I __ N R) (FBI) 

Friday. April 02. 2004 1 13 P M 

I l ER) (FBI)J IeR) (FBI) 

FW: Status 


SENSITIVE BUT 
NON-RECORD 


fyi. 

O riginal Messacte- 

Froml^^ 

Ser-*" 

Subject: RE: ^tus 






](SU) (CON) 

J 24, 2004 9:56 AM 
(ER) (FBI) 


b';c 


SENSITIVE BU T tJ HOLAOOir i E P 
NON-RECORD 


rhere are three variables that I check in the One Way Push system: DCS 3000, TIU and the RedWolf. 

Historically, early in the program, I checked sessions received on the RedWolf against the DCS 3000. (During this test, 
only one of my three targets was reliable. The other two had problems at the central office CALEA setup so I did not 

includ e them in my testing.) After I found the CDC discrepancies between the DCS 3000 and the RedWolf, I got with| 

I I Ravtheon and we set up a log file to capture what entered the TlU from the One Way Push, i compared the first two 
days of that log with what sessions I got at the RedWolf. I found that about 1 0 per cent of the calls that appeared in the 
TIU log never made it to the RedWolf Some of the calls were less than 5 seconds but the rest were of ^gnificant length ie 
30 seconds or more. 


I ^ poke witti bnri it was decided that I would sern j ^ me files from the TIU log. What I gave|__| 

was a different set of data than what I originally used. He ran a companSOrnTT DCS 3000 data and TIU logs for the same 
period of time and found that the TIU logs showed significantly fewer calls than did the DCS 3000. 

jame to Salt Lake City during 3/1 -4/04. He installed a new baseline on the TIU. We compared four days of data 


s 



fcb 

b7C 
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between the DCS 3000 and the RedWoJf. 


oJf. There 1 


was a 100% correlation. 


OurCALEA intercept expired on 3/16/04 but I am working wittf |to install a test surveillance at the central office we , 
had all the problefljsjMtii. That's about all I know. There are a couple of black holes that need filling in, I don't know jr';: 
what, if an^hing[ Idid and I remember installing a couple of modifications for you. 


CDC/CCC data is correlated in RedWolf by comparing data in the CCCOPEN field of the CDC message to what the user 
enters into the Circuit ID field of the CCC setup page in the TIU. I don't know of any manual method of doing it. We had a 
problem in that 5E switches assign a trunk group number to each CALEA surveillance. For instance, let’s say my first 
surveillance had 0059-0000 and 0059-0001 as the circuits my audio is leaving the switch on. Those numbers appear in the 
CCCopen field and RedWolf combines the two paths into a single session. When CCCopen data doesn't match what is 
entered in the Circuit ID field, RedWolf shows two different sessions, a data session with no audio and an audio call with 
no data. 


Here's the problem. The TIU will not accept duplicate information in the Circuit (D field. Where the 6E switch uses only 
numbers to identify their cutting trunk members, it is very possible that 5E switches from different central offices might 
assign the same number to identify the outgoing trunk members to an entirely different CALEA surveillance. 

I ^witches include the unique name of the switch in their data so it can never be duplicated. 


— -Original Message 

From I I eRI (FBI) 

Sent: Tuesday, March 16, 2004 12:33 PM 
T< Ifsuucom ^ ^ 

C a l ER) fFBD l (FBI) 

Subject: Status 


SENSITIVE BU T UMOLACO i r i E P 
NON-RECORD 


be 

b^c: 


H 


There has been a lot of discussion regarding the status of the DCS-3000 One Way Push system. At your earliest 
convenience, could you please send a status update? When we spoke last week it sounded like things were vastly 
improved. The question is how reliable and how stable is the system performing? Are we continuing to loose data or 
has this issue been resolved? If so, what was the resolution? 

Also, please help us understand how the data comparison is performed in order to assure that no data is lost, how is 
the CDC/CCC data correllated, etc. it is most advantageous to have the CDC/CCC data automatically correllated by 
the RedWolf, but my understanding is that the process is manual. Please describe the environment-(mechanisms) that 
are used to correllate this data. If there is anything you need from us. feel free to call any time, 

Thankd [Have a great week! Enjoy your wife’s Birthday Bash next week, we'll miss you in San Fran. 


gtor 


to 

L“C 


SENSITIVE BUT UNCLASSIFIED 


s 
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SENSITIVE BUT- IPm 



h e 

SENSITIVE ^ ' 


[ 


From: 

Sent: 

To: 

Cc: 

Subject: 


lOTD) (FBI) 


I 

Tiipgflau 


Status 


IeR^ (FBI) 
2004 2:33 PM 
— JU)(CON) 

l (ER) (FbC 


JeR) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



There has been a lot of discussion regarding Uie status of the DCS-3000 One Way Push system. At your earliest 
convenience, could you please send a status update? When we spoke last week It sounded like things were vastly 
improved. The question is how reliable and how stable is the system performing? Are we continuing to loose data or has 
this issue been resolved? If so, \A4iat was the resolution? 

Also, please help us understand how the data comparison is performed in order to assure that no data is lost, how is the 
CDC/CCC data oorrellated, etc. It is most advantageous to have the CDC/CCC data automatically correllated by the 
RedWolf, but my understanding is that the process is manual Please describe the environment (mechanisms) that are 
used to correllate this data. If there is anything you need from us, feel free to call any time. 

T hanks^^Jn a ve a great week! Enjoy your wife's Birthday Bash next week, we'll miss you in San Fran. 


Later, 

l~^ 


SENSITIVE BUT O lH i LAOC i r i B D 


[ 


IpTD) (FBI) 


From: hs 

Sent: t7c 

To: 

Cc: 

Subject: 


I _ t DU(FBI) 

Tuesday. March 16. 20 04 1 1 :52 AU 
I E R) (FBI);|_ 




I IDL) (FBI) 


] (ER) (FB]){ 


1 



Pen Register 
Evidence.doc (57 ... 

IJMCbADDinCD 

NON-RECORD 


The attached document details the current procedures Dallas uses that pertain to pen register evidence. It also outlines 
the procedures we will implement in the near Lture and some suggestions for ERF to help us move in that direction. 
Please feel free to share this info witti anyone else you see fit. 
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Once I receive any comments from ERF and find out if our requests can be implemented, I will prepare a final detailed 
description of the new procedures for Dallas's use and you can post them on the DCS 3000 web page. 

Please contact me if you have any questions or suggestions. 


From: 

Sent: 

To: 

Cc: 

Subject: 


TDJ (FBI 


KER) (FBI) 

?nna a -jt fi pm 

ISP) (FBI) 

^ l ER) (FBli 
.-oncerns 


tER) (FBI) 


NON-RECORD 


Weil we made it back just in time to enjoy the flaky Northeast weather. Seme clarifications regarding discussions from our 
visit: 

1) Handling of Criminal Data -vs- FISA data: 





From: 

Sent: 

To: 

Cc: h-‘ 

Subject: 


L 


F 


V I r=I?Te ^\THI trJ pTf>TkT« 


Meeting at blT 




TWT 


]{OTD) (FBI) 

* '’90611:44 AM 
flTQDilEBn 



1{0TD){FBI) 


TI NLLAOD i r iBD 

NOM-RECQRD 


Now ttiat all Holidays are behind us t was wondering if we can try to schedule a time for 
your group to come down to ERF and talK about TA. Let me know what your schedule is like 
for the upcoming weeks if possible. This week is bad for us and I have travel on 1/24/tffi. I know 
getting a time for everyone to meet is always a challenge. We would like to demonstrate how 
the DCS 3000 data is collected and have your group give a demonstration of how to upload the 
data. I think we can all make great strides forward if we can get together. 


TICTU/SBIT 


I ~1(OTD) (FBI) 


From: .fcs 

Sent: b7 

To: 

Subject: 


n[(OTD) (FBI) 

Fririav .laniiani Q-,d7 

I lOTDI (FBI) 

FW: 7 A Matter, 01/26 


ORSM^iEiEg 

NON-RECORD 


This is what happens when your first names are too close. 


Q 


Jiiginai Mess^ 
Rrom: |_ 

Senti 
Toe 
Cc; 

Subject: 


lo) (FBI) 


Fhffa^/ laiMtarv 37. 2006 9:38 AM 


7 rK:"8175 g 


IHO) (FBI) 
□(OTO) (FBI)J_ 


nnri II II II II II 

NON-RECORD 


ALL IMFORHATIOH COtnAIHED 

HEREIir 13 lOJCLASSinED 

DATE 06-15-2007 EY 65179 DKH/K3R/DK 


loTD) (FBI)| ~|(OTD1 (FB1){ 


JOTD) (FBI) 


This is to make you aware of the Kidnapping m atter brought to me Sa[ 
obtained addresses and the orientation of threJ T 



Yesterday aftemoon^^^oad 


md wanted to know if it was possible ti 

was possible. 




t;, 


Ih.; 

b?^ 


1 




secret 

The victim, a 15 year old, had been forced into a van and raped by three unsubs. While 


I contacted! end 


imediatelv took the 


Irovid ed to me bvl land within a few 


as a happy camper with this information. 

khould be commended for their prompt action. 


OTD) (FBI) 


From; 

Sent: v - 

To; 

Subject: 


kOTD) (FBI) 

aauatu 27, 2006 9;50 AM 
_J(HO) (FBI) 

BaRerT 01/26 


NOM-RECORr 




JUsl a little note. I i s the one who gets most of ttie credit, 

middle man. We hope it helps and we will try to develop a Trilogy based 
Trilogy however this is a slow and painful process. 



Original 

Ff«mj I t toi (FBI) 

Sent* Friday, Januaty 27, 2006 9:38 AM 

To: AANnFRS. DEBRA fHOi (FBI) 

Cc: I PTD) (FBI)! 

Subject: ' MWattef;7JT735 — ' 1 - 


tOTD) (FBI)J 


lOTD) (FBI); 


was just the 
i always with 


(OTD) (FBI) 


NON-RECORD 


This is to make you aware of the Kidnapping r 
obtained addresses and the orientation of thrs 


pt to me by SAl 


bas possioie. 


yesterday aftemooH 


The victim, a 1 5 year old, had been forced into a van and raped by three unsubs. While ban g held, was able to b 
obtain a cell phone and make a call and upon her release, additional calls were made bv herel bbtained records 


I contacted j | and he an j | immediately took tti 


provided to me by 


and within a few 


2 


l(OTD) (FB)) 

ary 30, 2006 11:05 AM 
(OTD) (FBI) 


NON-RECORD 


There are several things going on that we probably need to coordinate. I sent an e-mail 
from TA on 1/1 7/06 and have had no response. We really need to have meeting with 
on how the DCS 3000 information is utilized in TA. I had a 20 minute conversation witt'j__^__^^^_Jhis 
morning about such issues. It would be nice to have the TA peo ple com r r i nn itn here and give us a demo of 
cur rent capabilities for analysis of the CALEAdata and talk abou i [ ^llata import. Second, I spoke 
with i b st week. The Gang Task force circuittejnjiewgnte to know when we can come out 

and hook it up. Also, the old task force wants to I SO we are getting double teamed 

on this one, 1 suppose at least two members of the ream need to go out and do this one. Third we have 
several circuits that we are going to need cross connected from ERF to the new building. Does I I 

have a plan for how we will request the cir cuits to be identified by both the originating and terminating locations? 
t forwarded the circuits from i t >n the 10th. In SBIT we have at least 5 lines also to cross connect 

Let me know when you have had a cnant^ to think about these. This morning was kind of crazy recovering 
things from the weekend. 


36«^ET 




m, 


OTD) (FBI 


From; 

Sent; 

To: 

Subject: 


Monday 


I (OTD) (FBI) 

T9. 200 5 5:14 PM 
I (OTD) (FBI) 
' UMP^DCS 3000 


SENSITIVE BUT I 
NON-RECORD 


Original Me 

From; 

Sent; 

To; 

Cc: 

subject: 


|HO) (FBI) 

Inrvia'/ fVromhPr iq 2005 12:42 
(OTD) (FBI) 
HO) (FBI) 

nomer icon tor CMP DCS 3000 


SENSITIVE BUT UngLAJOiriBD 

non-record ^ 


Would it be possible f or you to cre ate another icon for a new FISA tgt: 
same manner as we downloaj i 

It would make life easier for our TS and the weekend tech duty agent. 


I we can download it in the 


Thanks, 


SENSITIVE BUT i 


OTD) (FBI 


DITE; 06-19-2007 

CLASSIFIED BY 65179 DMH./K3R/DK 

REASOH: 1.4 (G) 

MCLASSIFF ON: 06-19-2:032 


From: 

Sent: 

To: 

Subject: 



TO) (FBI) 

,, 2005 9:5; 
?TD) (FBlf 


(OTD) (FBI) 


tgON-RECORD 


— Original Me 


Sent; 

To: 

Subject: 



m {FBI) 
er 07, 2005. 
OTD) CFei)l 


ALL IMFORKATIOM COMTAIMD 
HEPEIH IS UNCLASSIFIED EXCEPT 
UHERE SHOW GTHERFISE 


(OTDKFBt) 


SB^ET 


MQK-RECORD 



Hey guys - 

This is just a quick note to let you know they are doing more power interruptions at WFO Uiis month. 

12/14/05 which will be our 4th floor {which should not affect the DCS at all) 

12/20/05 mill ho rtiir fi^nr (jhis Will affect the DCS 3000). This will include the DCS and all of our modems and 
routers in th d h /e will be powering down the DCS 3000 between 5pm and 5:30 pm. And hopefully it 

will be back up before 10pm. 

If you need anything from us, or can give me any helpful advice, I would appreciate it. 

Thanlf '/ftii 

202 - I I i;,:c 


UltyLAJ ill !Eb 


From: 

Sent: 

To: 

Cc: 

Subject: 


fc7C 


JOTDJjFBj2_ 


[ 


TiTH! IfTdlLTi 


fOTDt /FBh 


](OTD) (FBI) 

1^3, 2005 8:52^ 
If Q 


;6tD) (FBI): | | (OTD) (FBI); [ 


LaTD) (FBI) 


3 


UUCkAOO i nCP 

NON-RECORD 


b2 

b7E 


All, 

Two ] j are being sent from Denver to Miami. Also, two DCS 3000 systems for use with the | 

system 

to be the replacement for thd^^^_^^^_|was sent also. However, the DCS 5000 has the internal ability to perform 
the ISDN interrupt 

for th j b hones. As I have stated to everyone before if the manufacturer of the collection system has an inherent 
ability to do 

an intercept putting ^ |n only adds to another point of failure 1 spoke witt| [about whether he had 

the ISDN card 

for the DCS 5000 and he said he did. He also stated no instructions or support for installing it had been sent Would 
someone from the 

DCS 5000 program please address this. 


to 6 


— Original uesaapei 
From; [ 

Sent: , 

Tot I 

Ccj [ 

Subject: 


JOTD) (FK) 


iiiMflau nrum m ? npt; R’lq am 
IfOTDi (FBI)J 


FW: 


Z 


IfOTD ) (fW 


]otd) (FBi£ 


Jcnro) (FBI) 


UNCLASSIFIED 


b2 

:fc7E 





NON-RECORD 



From: 

Sent: 

To: 

Cc: 

Subject: 



RE: DCS-3000 


JOTD) (FBI) 
1^005 5;09 PM 
AL) (FBI) 

(FBI) 


NON-RECOM 


We have to write up weekly accomplishments for the Director's report and feed back like this is greatly appreciated. If 
you have 

any rrtore details that we could put in our write up about how we may have helped that would be awesome. I unfortunately 
am on 

leave Monday, so if you could CC l ~h r\ any response he is going to write it up. Tuesday is our deadline on 

getting something in for the report I know you're busy so anything is helpful. 

ThankSj 


SEjgl^T 


3 



SBIT/TICTU 


nrjfiinal 

From i I (AL) (FBI) 

SentjJJ(gjl2ggjIa^^^2)£S^ 02, 2005 1:01 PM 
Trt^l ifOTn^ rpRT^ 

Cc i I OTP) (FBI); I l AL) (FB1){ 

Subject: DCS-3000 


](AL) (FBI) 


1 1 Kir* I Agctcicn 

NON-RECORD 


^ 1 1 ; 


nank you and great job. The guy they picked up in CT through info provided by the DCS-3000 system is the 
suspect in a double homicide virfiich occurred in northern VT a couple of days ago. You helped save a lot of agencies 
a lot of money and man-hours and, most importantly, you helped take a bad guy off the street. Thanks again. 




Alb any Division 
51 
51 
51 


work 

cell 

fax 


bh 

b7C 



4 


ET 


|{OTD) {FBI) 

04, 2005 8:46 AM 


From: 

Sent: 

To; 

Cc: 

Subject: 






nrn\ frai\ 


TICTU Annual FY 2005 Report 


](OTD) (FBI) 


U N OLAOS IWeD 

NON-RECORD 


Below is the info you requested, t will 


follow up witfj^Jthis morning also. |__|is out today on sick leave. 


he 
•b C 


i. Switch Based Intercept Team. 

- Developed Trilogy hosted ^^^^__^^_^pplication for utilization with CALEA pen registerQ__|nformation. 

I I 

- upgraded and maintained the OCSNET, which distributes CALEA pen register and packet audio, for the FBI's 
field offices. Also, migrated circuits for network robustness and failure recovery. 


- Supported New Orleans operations relocation t<| py tactically engineering DCSNET connection and DCS 

3000 

equipment support. 

- Upgraded DCS 3000 systems to incorporat e "S ystems into all major field office systems. 


I 

- Continued expertise and equipment support for ALL CALEA based intercepts for the FBI, 



Below are the numbers for the requests. They seem very low but I asked i t wice about it. 

SBIT RMS Total I I b2 

RMS Closed | I b7E 

RMS Completed I I he 

RMS Working I b^c 

RMS Other Statu^__| 


I aske J I to see if he can get our shipping report. A lot of times we take a call and just do a shipping form without 
opening an RMS. In hind sight this 
makes our stats look bad. 

Traditional RMS Total 
RMS Closed 

5 



seMi 


RMS Completed 
RMS Working 
RMS Other Status 


3BKRET 


OTD) (FBI 


From: 

Sent: 

To: 

Subject: 


l (OTD> (FBI) 

Frirtav Ortnher?1 

(FBI) 

FW: CALEA data fields 


DCSPC.txt (4 KB) 


JITliUSSlFlSU 


NON-RECORD 


— O riginal Message — 

From I "b ro) (FBI) 

Se nt: Pridav. flctober i 605 5:16 PM 
To:l^_^^^^^OTD) (FBI) 
Cc i t )TD) (FBI) 

Subject: CALEA data fields 


NON-RECORD 


Attached is the CALEA data set field s that the DCS puts out for upload to TA. There are at le ast 3 new fields in t:; 
addition to this those in the attachmet, number) that we 

are working on integrating into the DCS 3000. I ake a look at it and see if they make sense. 




lOTDj (FBU 




From: 

Sent: 

To: 

Cc: 

Subject; 


[ 


Fndav Octofaer^TT^ 


CALEA data fields 


loTD) (FBI) 
2il5.5:16 PM 


OTD) (FBI) 
OTD) (FBI) 


DCSPC.txt (4 KB) 

TWILLAJJIRBO 
NOW-RECORD 

IL' Kj 


Attached is the CALEA data set 


addition to this those in the attachmet, fi. ej 

are working on integrating into the DCS 3000* Take a look at it and see if they make sense. 


aUeast 3 new fields in 


Jill number) that we 


b;- 


UilCLACOiriBCT 


lOTD) (FBI) 


From: 

Sent; 

To: 

Cc: 

Subject: 


Thurs 




]OTD) (FBI) 



Task Force Operations 


bw 29, 2005 5;34 PM 
(SecD) (F, 

D) (FBI) 




](OTD) (FBI) 


SENSITIVE BUT U NOLA S a i F I CD 
NON-RECORD 




le FBI is involved with many Task Force operation s which are in need of our assistance in performing 
CALEA pen registers have recently had a request from the 

Denver Field Office to support the l W ith our DCS 3000 system. The Task 

Force site has a larg e FBI aoent pre sence and i$ rated for closed storage of Secret inforn ytion It has 

access but th j t ey is locked away when FBI personnel are not present| | 




meir operations. 
Thanks. 


nd I visited the sjte last week and would like to talk to you about what we can do 


' support 

Please let me know if there is a time that we can talk to you about this situation. 


b7E 





From: I t OTD^ (FBI) 

Sent: ^ •; .gantomhorTg 2005 12:50 PM 

To: hv, I I fOTDMCQN) 

Subject: RE; ERF-E Double-Checking TlCTU’s Antenna Platform Usage Needs 


SENSITIVE BUT UftlCLASSlEIED- 
NON-RECORD 


I apologize for the delay in responding. To answer your questions in order. 

1 ) Two feeds should come to the DCS 3000 Lab and one to the DCS 5000 Lab. 

2) These are NOT satellite dishes. 

3) The 4’ vertical pipes should suffice. 

Thanlfg 


— Original Message 

From: f I (OTD)(CON) 

Sefrti_£(jjJa^,_5Slfeniber 16, 2005 4:17 PM 
To| IfQTm (FBI) 

Cc l I fOTDI (FBI) 

Subject; RE: ERF-E Double-Checking TlCTU’s Antenna Platform Usage Needs 


SENSITIVE BUT UHOLAOa iPI C D 
NON-RECORD 


thanks for the response. Just a couple specifics to clear up: 

1 ) What lab(s) do the feeds from these 3 antennas need to go to? 

2) These 3 are not satellite dishes, right? these are "pin type", AKA the type friat “looks like a TV Antenna", right? 

3) These 3 are the typical type that will mount onto the 4’ vertical pipes on the rooftop platform, right? (similar to 
mounting style on top of Pod A roof now) 


Thanks, 


— -Orjflu]3|JJgs52ge ,7 

From i I f OTP) (FBI) 

Se nt: Fridav. Septem ber 16, 2005 12:35 PM 
TqI J(OTD)fCON) 

Cc: l l OTD) (FBI) 

Subject: RE: ERF-E Douole-Checking TICTU’s Antenna Platform Usage Needs 


8 

SE^ 


T 



SENSITtVE BUT UHOLAQQ i nilD 
NOM-RECORD 




TICTU requires three antenna platform positions, one fo 


h6 

b7C 


Telecommunications Intercept and CoUection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Operational Technology Division 
Qu antico Virol n ia 


Froi 


Q [iainal Message-— - 

rox 

sepcember^ 

loTD) 


l(OTDXCON) 


S ent: Wednesday. SepEember H. 2005 i;Q6 pm 

T< t toTD) [ FBIXr _TgE>A fFBI) 

Cc l t rTDUCON) | 

Subject: RE: ERF-E Double-Checking i i(, i u’s Antenna Platform Usage Needs 


ibfc 



SENSITIVE BUT IrfHULAilAll ILD 
NON-RECORD 


c 


3- Need to double check v«th my same question below - (if you already responded to my 


email below, sorry, I lost it and it's not in my files - please resend) 


Thanks, 


From ! I fOTDVCON) 


Sei rt; Wednesday . August 31, 2005 10:38 
To il ICOTD) C FBIXr 

Cc l ' lr nT»fCON) l 

Subject; ERF-E Double-Checking nCTU’s Antenna Platform Usage N^s 




(FBI) 

OTD) (CON) 


bo 


SENSITIVE P "^ 
NON-RECORD 


Dear 


he 

hic 


Please confirm if this statement is correct; 

At move-in, your Unit will not require space on the ERF-E roof antenna platform for any Satellite Dishes or 
Antennas, as far as you know at this time. 



9 


Do you concur? 



Just want to re-visit this question with you one more time, to confirm. 
Thank vnuF I f 


SENSITIVE BUT UMCfaAaSIFTEP 


SENSITIVE BUT lihlCLACetWfiO 


SENSITIVE BUT 0WLLMJ3N IbP 


SENSITIVE BUT HW eLAOO i riEP 


SENSITIVE BU T UNOLAOO i nC D 


] IOTP) (FBI) 


From; 

Sent: 

To; 

Subject: 


b' 


c 

c 


p j [ question 


I fOTDi (FBI) 
aoabaLJS, 2005 9:25 AM 
\ SF) (FBI) 


U II OLADS i r i E D 

NON-RECORD 


Technically I think this should work. You don't need the telephone number to 90 up on hie surveillance. However, b 2 
what did they make r- , 7 e 

the CaselD? Give me a call so we can talk about it. 

TllSUhSk-— 

b ^ 

H rininal 

From ! I fSF) (FBI) 

SerJiJJfiEdSiL^SIlSfiCQb®'^ 2^CX)5 2:17 PM 
To ! i (OTD) (FBI) 

Subject: I h uestion 


!JNe^£glC!iO 

NON-RECORD 


10 


SKftET 



h :: 

i'j'o 

} 



I B omeiiow one the a gents here obtained a court ordered pen register witi 

1 yii I ,1 I’m assuming their sou rce got t he phone and copied 

the subscriber name or associated ph one no per l ^ cause it is a 

however provisionedjLM the pen an<j |>ut needless ra say the DCS'JUUL) Igfl \ collecting anything. Is it possible to 


r a l b ccount with just the 
r. The y are una ble to get 
iccount i | ias 
fining. Is it i 


» d it for I 

collect based on an i l or does the U(jy need a ten digit phone number. It is currently i n the No rthern Calif, market 
with surveillance ID’S and passwords available for Southern Calif, and the Arizona market. r l ias provided three 
separate surveillance id's and passwords for these markets. I don't know is the phone is DemgTjsed^^U^i^ of these 
three markets, which may explain why we haven’t collected anything. The agent also has two otherj__™Jne3 set up 
in the same markets. They are collecting in Northern Calif., because I have them entered in Northern Calif, if they 
stop collecting. I was going to enter the other surveillance ID and password for the the Southern Calif, market; see if it 
collected and change it to the Arizona mark et if Southern Calif, didri^ 't collect. Am I going in the right direction with this? 

Any guidance will be appreciated. Thanksl I 




UIICLAOQirigP 


[ 


From: 

Sent: bo 

To: 

Subject; 


](OTDl (FBI) 

I 




loTD) {FBI) 
13,2005 2:29 PM 
][OTD)(FBl) 


FW: COOP Information Requested for OTD Systems - Complete by 8/4/2005 


Importance: High 


2.WPD (20 KB) 

U MCkASS tfIBD 

NON-RECORD 


[ 



you look into this? 


bs 
lb 7 ' ‘ 


I 




] 


Origing|_£Jg222cie 

From ! If OTD) {FBI) 

Sent: Wednesday, August 03, 2005 1:47 PM 
To) n(OTD) (FBI) 

SuBjeet: PW: LUUH inrormation Requested for OTD Systems - Complete by 8/4/200S 

Importance: High 


NOW-RECORD 



u 


The 3000 is cited on this message... 




From| I (OTD) (FBI) 

S ent: Friday. July 29. 2Q0S 4:07 PM 

Toi - rOT D) (FB 1 ) |~ 1 (OTD)( FBnn 

m Pi imi l fITO D)fCON):l I fSec D) fF 8 I) 

Cci l nP)[FBI)r'. rO TPifFBO:/ 

i f QTD)fCONTI TOTD) (C 0 N[ 

(OTD) (FBI) ' 

Subj^: COOP Information Requested for OTD Systems - Complete by 8/4/2005 
Importance: High 


](ITD) (FBI)| 


lOTD) (FBI); 
1(OTD)(CON; 



JwcMsetHw 

NQN-RECORD 



Your have systems (EDMS, DCS systems, CART SAN, DITU systems) that may be designated as "Mission Criticai". OTD 
System Managers are requested to provide information about the Continuity Of Operations Pians (COOP) for systems 
designated as mission criticai. As noted in the attached EC, information is to be entered at the following FBI Intranet 
website by 8/5/2005. I - 


If your system is mission criticai, please provide me with the system name and a copy of your COOP plan and an email 
response to indicate that you have provided the requested information to the website. If your system is not considered 
critical let me know that also. 


You may have a list of OTD systems that are dsignated ' Mission Critical" and have or should have COOP plans. Please 
provide this list to me so that the PMO can make sure ali appropriate system managers provide the requested info. 


PMO will prepare an EC indicating OTD's compliance to the OCIO’s request. 



EJectronic 
Phone: 70^ 
Pager: ddi 
Cetl: 20 : 

Fax; 70; 


: SuQeijlan^^e' 
i: 

i: 


ichitology SecUon, OTD 


Original Message — 

From: CUFFORD, MICHAEL (OTD) (FBI) 
Sent: Friday, July 29, 2005 2:49 PM 
ToJ tOTD) (FBI) 

|Cff ■ flTD) 

I | (OTP) (FBI) 

bUDjecc; i-W: ACTION download 

Importance: High 


(OTD) (FBI);I 


(OTD) (FBI); 


12 


UMCLW^ BFirp 

NQN-5tECQRD 





I l as discussed, pis handle fo r OTD. COOP requirements would include EDMS. DCS, CART. 

DITU as well others.] |SecD, stationed at ERF, would have a full list of OTD systems to 

be considered. ' ' 


Michael P, Clifford, Jr. 

Section Chief 

Electronic Surveillance Technology Section 
Oper ational Tech nology Division 
(7031 Office) 

(7031 Cell) 

(SOOil Pager) 


-Original M^aoe 


■T 


](OTD) (FBI) 
7:54 AM 


Sent: Friday, July 13 , 2005 
To: CQFFORD, MICHAEL (OTD) (FBI) 
Subject: FW: ACTION download 
Importance: High 


b.:: 

fc'b 


iiuri nrririrr ~ 

NON-RECORD 


□ 

Can you have 


amrod this? 



HMOLACCiriEB 




uweLAsai riBP 
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From; 

Sent: 

To: 

Subject: 


I ~^TD1 (FBI) 

Monday. July 25 20 05 10:01 AM 

I ■ :::~ NY) (fbd 

RE: DCS3000 training 


‘tm ‘rimr 

non-recqrh 




rhanksforthe E-maiL Glad your journey home was a safe one. Give us a call 
if you need any help. 


h. 6 


Qn 

Front 


Orininal 


Scpti-Suild3lfcJijl^24fciS 


3^Y) (FBI) 


,005 12:42 PM 
OTD) (FBI)£ 


]OTD) (FBI)J 


(OTD) (FBI); | | 


Subject: DC53000 training 


NON-RECORD 


Hi all: 

I just want to express how much I enjoyed the DCS3000 SW-based Intercept training, and the pleasure it vras meeting 
all of you. 

The class was very informative, and will serve as a great reference for my daily job responsibilities. Hopefully, Uie 
knowledge will allow me to be more comfortable with extracting information from the logs, but I'm sure I'll still be calling 
for your expertise and assistance. 

Thanks again for the excellent class, and the continuing support. 

Good luck with the move to the new buildingll 
Best regards, 




SEi 


T 


m 


14 




From; 

Sent; 

To; 

Subject: 


|(OTD}{FB!) 
35J434AM 
tOTD) (FBI) 


NON-RECORD 


Fron i 

Se nt: Monday 

■^®CZ!Z 

Subject; Adtr 


|[SF) (FBI) 

11. 2 005 5:22 PK 
loTD) (FBI) 



OTD) (FBI) 


Didn't know who to specifically address this to, so did the shotgun method. 



I [ vili be going to ERF for the DCS3000 training next week and will try to find some time to get your input 

I 1 1 desperately need to be able t d I into the VB system in Oakland. We h ave both T-lll rooms runnii 

in bt-; Oakland is running one line and trying to go up on six more. Can you give me a call fc hen you get 


I 1 1 desperately need to be able t d i into the vB system in Oakland, we h ave both T-iii rooms running 

in bt-; Oakland is running one line and trying to go up on six more. Can you give me a call you get a 

chance. Thanks for helping our on Saturday. Sunday, they overheard the subject organizing a oroup to do some killings 
and had to arrest him. I don't think they would of intercepted those calls if you hadn't helped. 


15 




From: 

Sent: 

To: 

Subject: 


I (OTD) (FBI) 

Thurertav h.iu in am 

IfOTDl (FBI) 

FW: DCS3000 Network use for VoiceBox 


SBNSiriVE BUT 1 
MON-RECORD 


— Original Message--— 

From ! n rSDI (FBI) 

Se nt! Wednesday. June 22. 2005 4:28 PM 
To i I fOTD^ (FBI) 

Subject: DCS3000 Network use for VoiceBox 


SENSITIVE BUT UHCLM».1>1I TCP 
NON-RECORD 


Has a decision been made as to whether the DCS3000 network can be made available for remote access to VoiceBox 
locations? 


16 




bTP) <FBI) 


From: 

Sent: 

To: V,'/ 

Subject: 


I tOTD) (FBI) 

Friday JUIV08. 2QQ5 11-43 AM 

tSA) (FBI) 

RE: DCS3000 question 


TWLLASJIFie» 

NON-RECORD 

, fc.7C 


The Time Differerwe pick in the DCS 30CX) pertains to the order expiration times. Since the DCS 3000 looks at Hie warrant 
database stop 

date and time to know when to stop recieving data we need to make sure that we have taken into account the GMT time 
difference so we 

^ don't undercQllect in this.jnstajice. The if you leave it a j | 

r^"“'“^^^THope this makes sense. On the DCS 3000 we DO NOT mess with time stamps within the data from the 
' (itirnsr um\ systems 

do use their computer clock times (i.e. the Voice Box). It is an issue that should be understood by anyone interpreting the 
data. 


b2 

b"'E 



— Original Message 

Fro mI (FBI) 

S ent: Thursday. July 07. 2005 2:50 PM 
T d I OTP) (FBI) 

Subject; DCS3000 question . 

b';c 


UMCkAes i r i EP 

NON-RECORD 


b2 

Do YOU ever set the Time Zone difference unde r! i onfiaure? We've been leaving ours 
I ' l A case agent asked me about that this morning, but was satisfied when I told him it was 

GMT. He said he could live with that. 


UNCLASSIFIED 


UNCLASSIFIED 


17 



3 


J 


From: 

Sent: 

To: 

Subject: 


OTD) (FBI 





|[OTD) (FBI) 

IV June 23 20 05 11:50 AM 
t \) (FBI) 
i output trom DCS 3000 


DCSPC.txt {4 KB) 


MON-RECORD 


Attach^ is a description of the CDNRS output from the DCS 3000. 



From; 

Sent: 

To: 

Subject: 


KOTD) (FBI) 
105^44 AM 

KOTD) (FBI) 


DCSPC.M (4 KB) 


NON-RECORD 


From l I fOTD) (FBI) 

Sent: Friday, June 03, 2005 6:28 PM 
t 4 KrroD) (fbi) 

Subject; UL3PL tormat 


NON-RECORD ^ 

b'VC 


Attached is the DCS 3000 output specifications for the DCSPC header. 


SE(^T 


UWLLA3.itlPTE0 




UWaLAASl Ptgp- 


To: 

Cc: 

Subject: 


fc";c 



OTD) (FBI) 

From: 


lOTD) (FBI) 


1 1 136 AM 

IoTD|m^ 


WDy(FBI) 




SENSITIVE BUT W i eLAC ii r iEP 
NON-RECORD 


h2 


Below is my synopsized version o 


a 


announcement. 


](OTD) (FBI) 


b6 

h'fC 


"The Operational Technology Division's (OTD) Telecommunications Intercept and Collection Technology Unit (TICTU) has 
recently facilitated 


realtime audio and pen-register intercept foF 
TICTU designed and *■ 


Voice Over Internet Protocol (VoIP) telephony service. 


Ih' 

developed a new intercept and delivery capability, using ttie DCS-3000 system, to perform intercepts for the Buffalo, - 
New York and New York City 

Fitiirt Offir-fts Thft TICTU's infrastructure was intstrumental in providing the conduit for this information to flow from the 
I h elivery 

points to the offices performing the surveillance. These new services provide constant challenges to current Electronice 
Surveillance (ELSUR) 

cdlections. The realtime fbw of this infomnation wilt allow agents to immediately act on information if necessary. Also, 
TICTU recently assisted 


the New York City office with a pen-register intercept of a 


VoIP telephony subscriber" 


SENSITIVE BUT UHffLAgBIPIBP 



sH(^t 

l(OTDHFBI)^ 


From: 

Sent: 

To: 

Cc: 

Subject; 


[ 


Tt lacHaij li tna f\7 


h6 

b7C 


t 


loTD) (FSI) 


05 10:58 AM 
WEI 


RE: DCS 3000 locator m Tyson 


□ (OTD) (FBI):| iOTD) (FBI) 

Tyson's 


Notebook.jpg (3 
KB) 

U WULMOO jr I Cl/ 

NON-RECORD 


b6 

b.7c 


I I 

VV€ 


Je can connect FBI spaced RA's to the network and give them a DCS 3000 workstation to do 
this. A circuit 

will have to be built for the network to be extended to the RA. I suggest a 56k DDS (digital circuit) as 
opposed to 

a leased line or dial up. However, I know cost and time are always a factor and a dial up wilt work. If 
he monitors 

a target in the RA be advised that it is on equal standing with any other client requesting that target's 
information 

and that for completness you must make sure that neither system has missed any information. 


IZZI 


-Original 


IL. 

b7C 


From] 


IWF) (FBI) 


S ent: Monday, June 06, 200 5 7:57 PM 
■ 1 (OTD ) (FBI 

FBO: 


2 


](WF) (FBI)| 


iVi» 



TuEyect; DCS 30Qi 


'I 


J 


]WFJ (FBI)[ 


lOTD) (FBIl. 
WF^ fFBI^:[ 


J 


(WF) (FBI) 


]WF) (FBI) 


NON-RECORD 


H i I 

Long time since I talked to you ( requested something from you ). 

I called me 06/06/05 re: a criminal pen registerwitt l I nformation. We are 
current ly capturing and uploading th e pen register information into TA for them. He wants to be 
able to J ... . * * know we can set this up on a DCS workstation in the Title III 

room. The problem is he is at th ^ p A in Virginia and wants to monitor it from there. 

How hard would it be to set up a DCS in the] [A office to use the | ^ I don't 


sEiafer 


20 


S^RET 

think we have any connectivity to them at this point. 


I Is this gnmpthinq wp ar^ nnino to do? If we are, then can you assign somebody from the 

day shift to handle this fo| | 



UMeLAJS i nC D 


UNLUU>hlHfcb 


I ~l|OTD) (FBI) 


From: Tog 

Sent: ] . ;, 

To: 

Subject: 


» (FBI) 

Friday. June 03. 2005 6: 28 PM 
I |(ITOD) (FBI) 


ucsFCTwmar 


DCSPC.M {4 KB) 

UHCLACeinED 

NON-RECORD 



Cried is trie DCS 3000 output specifications for the DCSPC header. 



UNl-LASSIHblJ 


SE^T 
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From: 

Sent; 

To: 

Subject: 


ibb 


I HOTD) (FBI) 

MnnHav Ma» Ifi 7nfL^a-4ft PM 

I r sj) (FBI) 

Kb; Hole 


s 

tech.9if (1 KB) 

UN£LA&S£iil» 

NOM-RECORD*^ 




ow did the emergency pen go? 


isked me about the switch identification issue to see if we 


resolve how to integrate the | ^^ nto th^ 


rininal MPC<ang-_-.-^ 

Froi H | (SJ) (FBI) 

Sent: Friday. May 13. 200^35 PH 


mt 

su^sctrnsis" 


hOj 

hlC 


lOTD) (FBI) 


Let me know. 


L'7 E 


UHIIM-AJM I CD 
NON-RECORD 


Hey sefior. 


I just created a very I""" [(since I 

dont think anyone els6 h6f6 KhflWS Whai a ping i s-.so max miam ma Ke it easier to rum. Anvwav. I 


created it in the DCS 3000 directory and is called[ 


look at it to make sure 1 dont bring the server down :-) | 





Anyway, just want to make sure its ok... 
thanks. 


fc-iE 


(yes, I should have been home lon g aao b ut I've been here all day watching DCS-3000 for the 
kidnapping. ..and I finally moved thel [o the DCS-3000 rack)... 



22 



UNCLASSIFIED 



OTD) (FBI! 


From: 

Sent: fco 

To: 

Subject: 



UNCLASSIFIED 

NON-RECORD 

r~i ( S ) 

nection ip and port are as follows for Hawaii. 

bl 
-b2 

I will check your DCS 3000 connections. ib ' f, 




OTD) (FBI] 


From: 

Sent; 

To: 

Subject: 



^OTO) (FBI) 

MAS 1:19 PM 
^ (LA) (FBI) 
itications 


notebook. jpg (3 
KB) 



I KJSked at the instructtons you attached, I don't have access to TA so i am unable to go through 
the procedures. There are two Issues to address here and I would like to make sure everyone keeps 
them straight 



23 


SEQRET 



The Second issue is th d l usaae. I enumerated the technical issues at t he TICTU Conference 
and that presentation is on the TICTU web site. 1 don’t knn y/ nf anv nians for t h | F uture Th at 

wTOuld have to addressed t d fc roup for the VB o | h rotTfi girma | h 

Historically, when CALEA began it was thought that the VB would be doing pen registers. 'l WIHK * 
there are some offices which have tried this, however, there are serious volume concerns with how 
the VB will operate if pushed too far. I am not the expert on the VB's capacity or what form a 
TA uploadable output would take. I do caution that any VB output upload should be understood 
by the field personr>el performing this action. What would be the timestamps, duration calculation 
parameters and will lAPSystem identity be captured? 


I do feel these questions issues need discussion, otherwise I wouldn't have brought them up in my 
presentation at the Regional conferences. We are schedulting an internal unit meeting to discuss these 
issues more and I will keep you up to date on vk^at I find out 


J 


Orioina^M^sage^- 

Fromi f I fU^ (FBI) 


SentLEcii 

To 

Cc 

Subject: 


Fridau Arvril 70 2005 4:25 m 
JlTD) (FBI)|_ 


(ject: TA Modifi^tions 


TlA) (FBI) 

inca 


hi> 

b7C 


Irro) (FBI);[ 


]0TD) (FBI) 


utici ftfBirie& 

NON-RECORD 


As mentioned in the TICTU confere nce. Tele phone Applications has been modified to accept b"? 
I | pen register data and | i nformation. 

We tested the upload of l l lata. It worked. ..with a few minor issues. We wrote step 

by step instructions for how to upload. I thought this might be useful for the other divisions. The 
instructions are attached. 

Now that TA has fields can th d l ean be modified to include th d I Also. 

do we nppff tn iipinari|~~^^^^^iging the attached instructions, or can we collect 
data on thej [now Inat i a nas been modified? 




S^T 



24 


ET 


UHILLAAMPtetr 


UMCLAaB IF I Efr 


From: 

Sent: 

To: 

Cc: 

Subject; 


k'6 

b'vc 


]0TD) (FBI) 

I i TD) (FBI) 

hndav. April 2t). 2LXJia ~:13 PM 
I fWF) (FBI) 

I m iiT) (FBI) 

Kt: Kernote Access to Pen Register Info (DCS 3000) 


TTTirt rnrirr 

NON-RECQBP_ 


Pen register information is n ot what the current system is set to send to ttie van. The system currentfy under t ,: 

development will send anonymo j b et up in the office. I just want to put that ifc ' 

clarification out so we get our terms starignt. Pen regisier wtiicJi vrauldfi target numb ^ and assty iate numbers 
is not an option at this time. It also has significant legal issues. I have left a message witt| pis morning 

and when he calls me I’ll mention your e-mail. 



NON-RECORD 


b7E 


I spoke 


upg rad es to ucs au uu so that 
Vehicl J^ 

me know wnat you need • 
get more familiar with it. 


^nd he suggested I send you an e-mall. We would tike your assi^ 
lat we can begin receiving Pen Register information remotely in ou[ 


!ance with making the 


Thrill also be reaching o ut to vqu since apparently this requires several players, 
from us to move ahead \ |is going to send me information on this system 


Please let 
system so that I can 


fc6 

t>'^C 

Thanks for the help, 


S 6 fe<ET 
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UIIULAiaiPIlTb 



TFD 


I 

From: 

Sent: 

To: 

Subject; 


loTD) (FBI) 

r IrO) (FBI) 

Thursday. April 28. 2005 3:22 PM 
I ~K ecO) (FBt) 

T?E; REQUESTED POA&M status updates 


TechTool.gif (2 KB) 


SENSITIVE I 


NON-RECORD 


The DCS-3000 system only has two users. There are two administrator priviiiged users, one of 
which is always logged in for operation of the DCS-3000 software. The DCS-3000 software must be 
run under the account it is installed as and requires administrator rights. The second is for reset of 
the first user account in cases of lost passwords. The systems are configured to log all login/logoff 
attempts. These logs are reviewed aperiodically. 

1 l?5c 


■Original Message' 


From d 

Sent: Wednesday, Apri 

To| 

Subject: FW: REQUES" 


ICSecD) (FBI) 

27 , 2005 11:08 AM 
(no) (FBI) 

TED POA&M STATUS UPDATES 


SENSITIVE 

NON-RECORD 


The item of interest to you is the DCS-3000fismaPO/^ 

fcG 
b '/C 


Cheers, | I 


ERF (703) 


— Origin3mSSS395^ — 
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SE^T 



-S^ET 

JSecD) (FBI) 


From: l 

Sent: Tuesday. April 26. 2QQ-; 1:14 PM 
To ! I . (SecD) (FBI)f 

(F^Q 

Ccj 


](SecD) (FBI);[ 


Subject: REQUbSIbU POA&M STATUS UPDATES 




]secD) (FBI);[ 


}ais) 


](SecD) (CON) 


SENSITIVE BUT UMCLAOOinCD 
NON-RECORD 


AMlJ pas requested updates in status on the following systems which are 

in Trusted Agent for FISMA purposesif. 

DCF 3000 (ISSM | I 

BICS Online nss m 1 

McIntosh LAN (ISSM | \ 

Could you please send status update to l I with a CC to me. Attached are the latest 

POAMs for these systems that are within AU. Thanks in advance for any status updates. 


AccreiMtatloa Unit 


Secu fltv Plvlslon/ lnformatlon Assurance Section 

12021 iVjgm 

(202>l 


b:;: 


SENSITIVE BUT UNftLA33 IP i eP 


SENSITIVE BUT 


SENSITIVE BiiTuiiiri ffninm 
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se(Mt 


From: 

Sent: 

To: 

Subject; 


UblffHWSlFlEb 

NON-RECORD 


b6 


I 

Kt: neip onj 


Jtdhfbi) 



ITD) (FBI) 


fc ,2 


The ti tle of the list of dates should be Enhancements to DCS 3000; NOT Enhancements to 
Call me when you get this info. 

Thanks 


— -Original Message- — 

From ! If lTD^ (FBI) 

Se nt; Thursday. April 21 . 2005 10:56 AM 
To: l I (ITD) (FBI) 

Cc: | 

Subject: Help or | B tiestion 


t:2 


b' 


UNCLASSIFIED 

NON-RECORD 


Greetings, 

This is the referenced table. Below the table is a list of all the enhancements. Mr. Clifford’s question is 

1 . How do we have enhancements that pre-date the proof-of-concept, 

2 . Do these coste capture all of the enhancement costs as well? 

Please help!!! Feel free to update table with the correct info. I need your expert knowledge and answers back ASAP 
as the document which contains this table must be at the IG's office by noon today. Thanks again for your help. 


System 
Description 
Deployment Dates 
Personnel 
Costs 


se]&<ei 


26 


Nonpersonnel 

Costs 





Th j I s a hardware nlatfnrm riPwionfiH "in-hnusa" hy the Cryptographic and Electronic 

Analysis Unit to decode ! i The proof-of-concept development 

was completed in February 2001 . In the Fall of 2001, the Telecommunications Intercept and 
Collection Technology Unit manufactured 1 00 of these devices for immediate deployment to the field. 

2001 

$632,227 

$250,000 


Enhancements to 


h2 


L6 


lb7C 



29 


Tod 

Ccl 




Subject: RE:| 


liALUFBI) . 
□ (AL) (FBI)J 
Connection 


t:.7E 


iiucMgeineD' 

NON-RECORD 


] (TO) (FBI) 



*^®y| I 


I'm not sure of the need for the POTS line currently, you will have to asl d l about 
that one. but the T 1 line has been ordered and should be arriving by the first week of 
April. A s soon as i have the circuit iD and a firm due date, i will send that info to you. 
\ p suaiiy sends that to me about 2 days before the iocal teico shows up. ;-) 

1 -thanks for vour heip getting the POC info! 


— Or iqinai Message— 

From:r 

S ent: Tuesday, Mar^ 


l>j6Ct | p onnertionii^^ 2 


Ial) (FBI) 

5, 2005 3:04 PM 
(ITD) (FBI) 

(AL) (FBI) 


bTE 


NON-RECORD 

bG 

1 b7-'C 


I am jsut dropping a note to chec k orLthe^ tatus of your desire to put in a coi inection 
from th e DCS 3000 network to thq jSwitch here ir| I capturq 

I | n this region. 

As a stop gap measure, we had a pots line installed here in the RA which is 
available for the connection. I understand that a T1 line will ultimately be installed - 1 
recall talking to somebody and giving my name as a POC for the T1 . 

Is there a plan/need to use the dial up line in the meantime? 


Let us know. 


to 
1 7' 


I |Sro4‘ 

Aipanv Luvision - I 

(315)1 




(315 


(cetl) 


U MCLAOO IF tE D 

UH(M-A55 IPI E D 

w t efaAoo i ncD 


t7-i 


U MC LACOir i E D 


tfN OLAOC i r i B P 


win ft?giciEa 


[ 


From: 

Sent: 

To: 

Subject: b( 


]<OTDj (FBI) 

I l lTD^ (FBI) 

Tuesday. March 15 2 Q05 7:54 PM 

I V . 

RE:| I Connection 



)lank Bkgrd.gif (380 k- 

B) 

U i ie LA BSIPtgD 

NON-RECORD 


I 


VVS Mo need to connect the RA to thel iSwitch using the POTS line, i was hoping the 

DCSNET T1 would be 

in soon and we could connect the RA to the DCSNET and the 


witch all at once. We can do it 
itercepts. Until we get the DCSNET T1 in we 


separately though 

so we have coverage for the RA at least foi 
w ould have to dial up to 
thj |RA to have all the offices accesss diis. Let me coordinate with 
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nd we will send 

ri: o 




SECRET 


the equipmertf 


• 

needed to th^ 

|RA to get the dial up toj ^oing, 





1 





-Original Message ^ 


FromI 

l(AL)(FBI) 


Sent: Tuesday, March 15, 2005 3:14 PM 


To 


riTDI fFBII 


Cc 


TAn (FBI)I 

ZItTO) (FBI) 

Subject: RE| 

IConnection 

' 1 bs 





U WC LAOO i nC D 

NON-RECORD 


What say you[[ 


O riginal Message 

From I I riTD) (FBI) 

S ent: Tuesday. March 15, 2005 3:11 PM 

IfA L) (FBI) 

Zin(AL) (FBI);[_ 


b^C 


toT^ 

cc r 

SuDiect: 


^ject: R9 


Connection 


b2 


](rTD) (FBI) 


NON-RECORD 


Hey 


□ 


ho 

b?c 


I'm not sure of Uie need for the POTS line currently, you will have to ask i t bout that one, 
but the T1 line has been ordered and should be arriving by the fir^jateaLpf April. As soon as i 
have the circuit ID and a firm due date, i will send that info to you. I usually sends that to 

me about 2 days before the local telco shovws up. ;-) ’ * 


hanks fo r your help getting the POC info! 


thanks fj >i 


fc2 

b7i 


n rifiina! Messanp 

From j I ftL) (FBI) 

Sent: Tuesday, March 15/2005 3:04 PM 


bo 
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:ET 


h 

b 


To: 

Cc: l 

Subject! 




ET 

D) (FBI) 
AL) (FBI) 


{Connection 


bL' 

b7E 


U N eLA9S I Pi e& 

NON-RECORD 


lo,;.' 

I am jsut dropping a note to duacLaa the status of your desire to put in a^caaBaciiaa,froiTi b z: 
the DCS 3000 network to thej pwitch here irT Ito capturel |n this 

region. 

bo As a stop gap measure, we had a pots line installed here in the RA which is available for 

' c the connection, i understand that all line will ultimately be installed - 1 recall talking to 

somebody and giving my name as a POC for the T1 . 

Is there a plan/need to use the dial up line in the meantime? 

Let us know. 


Albany Uivisiom L ~| rA 
(3151 (cell) 






U N GLAOS i r fEB 


UMeLAaaincD 
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s 


TD (FBI 


From: 

Sent: 

To: 

Subject: ■' 


RE: DCS Question 


l(ITD) (FBI) 

?nri5 4 09 PM 

l lTQDVCONt 


SENSITIVE BUT i 
NON-RECORD 



page me. We are 

moving labs across the building and are very mobile. 


|(ITOD)(CON) 

J, 2005 10:07 AM 
JETD) (FBI) 


--OJ 

FromI 


Subject: DCS Question 


SENSITIVE BUT LWDLASSII ILlT 
NON-RECORD 


I spoke witt i |>n 2/8/05 about th^ |le and he informed me that the data is dumped from DCS. 

He also inf orrnea m e mat vo tniandle t he DCS data. ' 

I have s i l ie that I received from a user from NO field office. The raw data field is truncated 

and contains only 10 digits. Have this problem been resolved? 






SENSITIVE BUT U N 0LA 99t r iED 



c 


IoTD) (FBI) 


From: 

Sent; b 

To: b 

Subject: 


PML’;prrail* 


RE: DCS-3000 Work Station 


I(ITD) (FBI) 

I2, 2005 7:00 PM 
JAL) (FBI) 


Libii iA!'jinrp 

NON-RECORD 


We were doing a major network move today. Sorry t didn’t see this until now. Call me tomorrow and Til try to help 
you out. 

t hanL-e ' 

Tn 



From l t AL) (FBI) 

S ent: Tuesday, March 0 1, 2005 1:22 PM 
r j l (ITD) (FBI) 

Subject; DCS-3000 Wwk Station 


U NCLASSI PI E D 

NON-RECORD 


lb 6 
b7i. 




I trying to setup a work station in the tech room only to access the TICTU database system. The first problem is 
that I don't have the password. The second is that it was used previously and apparently the IP address has been 
reassigned. Can you help me out? Thanks. 


‘^"inTTirirn 
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seMt 



I llOTD) (FBI) ^ 

From: I t lTDl (FBI) 

Sent: 2005 4:43 PM 

To: fc 7.' I ^ JFBII , 

Cc: I [ pDHFBo J l (ITDHFBl) 

b2 

SENSITIVE BUT U H 6 LAOQI PIEP 
NON-RECORD 



1 - 

PS, The DCS 3000 training coordinator is l ^ due to the move our unit is going through a 

trilogy e-mail 

is probably the best way to contact here, h 6 

b7C 

SENSITIVE BUT UUeLAJJ i riED 



[ 



lOTD) (FBI) 


From: 

Sent: 

To: 

Subject: 


r 


1(ITD} (FBI) 

Od* 5:26 PM 

□- (ITD) (CON) 

hw: tjwitcriBasea intercept (DCS 3000) 


■ li :T*r a i ii m 



Notebook. jp 9 (3 

UUULAflJIPIftU " 

NON-RECORD 


Do we know? 


On 

Fromi 




Kvm 1 1 1 




I (TTD) ( 

T H 5o04 9:41 


(FBI) 

AM 


(ITD) (FBI) 


Subject: SwitchBased Intercept (DCS 3000) 


k-€ 

h'iC 


awflL*ccirtED 

NON-RECORD 


I am just checking in with you regarding the scheduling of the above ref^enced classes. When I reached out to you in 
September, I was told that they were yet to be determined. Are there any dates in the works? I have several OJT/TTA's 
interested in taking the course. Any assistance you can give to me will be appreciated. 


ti.6 

^ 1 c 


t ftifflLAao i ncD 
iTm I null _ 


seMt 
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s™f 


OTD) (FBI 


From: 

Sent: 

To: 

Subject: 


I -» (ITD) (FBI) 

Wednesday. December 08 . 2004 5:34 PM 

I r ■ ~ IfSOfFBh 

RE;| wireless tJ I 


NON-RECORD 


Sorry for the delay in responding. The Multiserv^ you have is connected to both carriers. You will have to add the 
rew caseid in the - 

DCS3000 client warrant database to properly request the| Icaseid's. Give me a call when you do this. I 

will take me a 

couple of paragraphs to explain it in writing versus on the phone. 


Thanks, 


Or^ 

From! 

Subject; 


K SC) (FBI) 

£^ber 01, 2004 7:54 PM 
□(n-D) (FBI) . . 

yireless tol I 


UNCPt89irilUJ 

NON-RECORD 


Will this 
Thanks, 


roblems with the DCS3000 with two case ID'S monitoring the same target? Please advise. 


O riginal Message — 

From J n (SC) (FBI) 

Sen *: Tuesday. Nfwemher 20 04 2:39 Pf 

SubjecI Ivireless tol I 


:) (FBI) 


NON-RECORD 


Hey guys. 


_Jfro ni rang 

addition to ttid 

pan be reached^ 


yil) also be provisioned througl I wl 
|ss will be the first 1 0 digits witn adaei 


which is now 
ed "AWSM" at the 


SEg^T 




UHUL*AAIFICb 

NON-RECORD 




hG 
b :'C 


Any and all testing you've performed to date has been to prove a concept. Therefore, I 
see no reason why you cannot "demo ' this at the Tech Conference (just like you 
demonstrated it to me). Thus use the term "demo!" 

This e-mail is not an approval to "test" though! I can't provide an lATT (interim approval 
to test) a system undergoing C8sA until certain project milestones have been achieved.. .and 
you aren't there yet. Hope this helps. 




ke have approached t he stage in our van integration project where we are ready to begin transmittin l 

Iwidth information from the DCS3000 to a non-secure beta version modem that is on 
a laptop wi^^^^^^^^^Jndefstanding this is for testing puiposes at the Tech Corf, we are not sending any case 
information or ir this was case information there is no sensitive information. With a)) this being said do we have the 
blessing to continue on with this testing in current status or do we need to include some encryption? 




TJNLLA^AII ih> 



|(OTgIiEgi)__^ 

From; I I tlTD) (FBI) 

Sent: .TnacflaH Mnuarnhy 23, 2004 5:23 PM 

To: I IfDN^ fPBn 

Subject: RE | ^ ppl^cations 


UHULAJJIFILir 

WON-RECORD 


are getting ready to post manuals on th^ 
They are both 


Jpplications frie week after the conference, 

; a feature of the DCS 3000 {special ^ 


independent applications (although not default installs with DCS 3000). The| , _ _ . _ , , 

button at 

tof^23CliilSL)IK3 rieed to activate (typically after a request from the field office). Let us know which machine (ip) you want 
activated an. 

be 
b7C 


I 1 


Oriaingj_Mgg§a2g— - 

Fn»n: l 1 (DN) (FBI) 

Ser it: Monday. November 2 2. 2004 6:14 PM 
To: l iTDUFBn 

Subject: I kpplicaUons 

b2 

b'.'E 

UMOL*SO i r i B9 

NON-RECORD 


I recently found my notes from the SF conference. Where do I access the| 
Thanks, 


bS 

C 


applications 





UNOLACC i r 4E& 
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s 


T 



OTD) (FBI) 


From: 

Sent: 6 

To: 

Cc: 

Subject: 


I l (ITD) (FBI) 

Tuesday KlQuember 2004 6;04 PM 
TD) (CON) 

I riTD) (FBI) 

RE: EOSO Orientation Nov 16 & 17 


NON-RECORD 



ill be giving the presentation tomorrow for the DCS3000 group. 


From ! 1l TD1 (CON) 

Seitfc^Tureda^jJJoven^ 11, 2004 3:18 PM 

To: i r rrp) (fbi) 

Subject: EOSO Orientation Nov 16 & 17 


NON-RECORD 


I know you must be busy. Can you please advise if you will be able to brief OCS3000 Wednesday, Nov 17 to the new 
EOSO employees per ttie following schedule? 


DCS3000 


l(confirmed) 


■ (pending) 


DCS5000 

DCS6000 


□ 


(confirmed) 

[confirmed) 


Thank you! 



JNOLMgiriEft 


SE^T 


lOTD) (FBI) 


From: 
Sent: r, 

To: ■ t 

Subject: 

(S) 

SECRET 

RECORD 


[ 


]lTD) 


(FBI) 


1 1 '48 AM 

I I WF) (FBI) 

Kt: ueii pnone intercepts / 1 ext messaging 


t:c.i 


h7l 


i=;i 


e DCS 3000 pen register software has the ability to accept and decode CALEA typef 





For the case agents to see the DCS 3000 product you will have to 




Summary or Log files since Telephone Apps does not take messaging data at this time. If you have any further questions 

naW at 


hi A 


Original Message 

Froni 


](WF) (FBI) 


S^t: WPrtnP<Ha'/ Hns/^rjihpr IQ, 2004 1:56 PM 
Cc: SArrO,( 


iriber 10, 200 
JtD) (FBI);[ 


]{WF) (FBI) 


JlTD) (FBI) 


Subject: Cell phone intercepts/Text messaging 


(S) 

SECRET - 

RECORI 


b] 

b’/C: 


I am not sure if you guys are the appropriate people to ask this question, but I thought that if you were not, you would 
know to whom to direct it. 

rm a TT WFO and I received a case agent question about intercepting text messaging on an I Ic ell phone 

|The case agent is getting the audio intercepts but not any text messaging. Our plant people told her that she 
had to come to us (the TTA squad) to go after the messaging. 

How does it work? What does the case agent need to do to go after the messaging.? 

Again, if this matter falls elsewhere in your unit, please forward this to the appropriate personnel. 

I ™ , I 

wr\jt i 1 


be 

b7C 


SE 
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DERIV 


SiFICATlQhL 


SECRET 



ideG^ jdatedV 9 ^y.F_fli^aii£auirtwUiitri«iuLilLli UU/ftStiaations 


6£RIVbLI FMJM. U i) TBI ri99Bifirntlon Guide G-3. dated 1/97. Foreiaii Counterintellloencfl InwMtIfntInnff 
npn ASSIFiCATF/^M i=vc»o:r.^ 

SECRET 



T>TD) (FBI> 


From: 

Sent; 

To: 

Subject: 


c 

c 


L^j rtTiTt K V4I ^ r*w^rri] a li 


TrDXFBl) 
'1200412:12 PM 
^^ANHFBI) 


p 

RE: DCS-3000 Client Located in Resident Agency {RA) atl 


b:;: 


SENSITIVE p nT^wM^ ftfj siFIED 

non-record' 


Send it back to us if you could. We will surplus it. 



From: l l /AN^ (FBI) 

Se nt: Thursday, October 28, 2004 5:32 PM 

T0 | k rrP) (FBI) 

object: ULS-3UUI) Uient Located in Resident Agency (RA) at 


SENSITIVE BUT UMCLftfiSICIEn 
NON-RECORD 


a the case agent ir i T dvised me today that the monitor ERF sent to the RA has stopped working. The 

light is illuminated when monitor is on (or power is cycled off and back on), however the so'een remains 
blank. The RA has another monitor available, so no replacement is needed . 

My question is do you want tiie broken monitor sent back to ERF or should 1 tell the agent to throw It in the trash? 

I > Anchorage ^ ^ 


SENSITIVE BUI UNCLASSIFIED 


SENSITIVE BUT UHOLA S S IPIB O 


SEG^ 
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From: 

Sent: 

To: 

Cc: 

Subject: 






ITD) (FBI) 
:004 3:30 PM 
illCKpON) 


J(ITD) (FBI) 


FW: Weekly Report to AD Haynes and EAD Ashley 


UUIftLASSI FI EB [ 

NON-RECORD 


I t asked me to look at the text below. I do have some suggestions for modifying it to clarify a couple of 

poin^. Below is my amended ^ 

version. Integrate it if it makes sense. ^ 



within nn.Q.-^nnn Wata mittTT 


th a I re already utilizing FBI software to accompli^ this for their agencies, with 

favorable results, ettectlveiy being "oui in front' of the FBI in utilizing this technology If granted authorization by the FBI's 
Security Division, SBIT can deploy this important and useful investigative tool to FBI Agents in the field." 


Original Message 

From I (FBI) 

ISy 2004 2:11 PM 
CrTD)(CONi ^ 

cc j ^ (TTP) fFBHJ Irrmt (fbi) 

Subject: RE: Weekly Report to AD Maynes and EAD Ashley 


lb 6 
lh7C 


•QlilU-AIJtlNED- 

NON-RECORD 


field and/or surveillance agent. This will be done by utilizing thJI 


— , □ 

b ut to the end usw - the 

Available within DCS-3000 


I 


Twrmf 

withf^ 




SIfSddV (jtili2ih^ FBI M 

UUI^UVUiy UUIliy lAit in' front’ of the FBI in utilizing this 


awi6iV) ' pir5 H' m 7 ^ w 

technology. If granted authorization by the FBI's Security Division, SBIT can deploy this important and useful investigative 
tool to FBI Agents in the field. 


i 


and collection Technology Unit (TICTU) 
EJectronic Stirveillance Technology Section 
Investigative Technology Division 
Quantico, Virginia 


fo'5 

b7<: 


■Original Message — 
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Belt^ 


SI 



Front 

tJ Trrp) fFBni 




2004 11:13 AM 


fn bi fFBnf 

:c:t 


J (ITD) (FBI) 


l(iro) (Fei);[ 


Cc 

Subject: Weekly Report to AD Haynes and EAD Ashley 


lUD^ 

I (HP) CFBIJ 


](ITD) (FBI)£ 


IbS 

b'C 




NON-RECORD 


Please let me know of any new initiatives, developments, or "noUiing significant to report" to include in this week's 
report by COB today 10/18/2004. 

Thank you! 

bb 

1 b.c 


W CLACOiOE B 


UMOLAttG i n eP 


From: 

Sent: b 6 

To: hlc 

Cc: 

Subject: 




li 


OTP) (FBI) 


c 


llTO) (FBI) 


Thursday. Qctpb^ 14, 2004 9:24 AM 
l(ITD) (FBli. 

TD) (FBir 


LITD) (FBt 

;^TD) (FBir 
^FIahid (itd“ 




i-2 


1 (ITD) (FBI); YOUNG, T M. (ITD) 


''iapping.wpd (2 


NON-RECORD 


SENSITIVE BUT Ul il gkAOO l P t eD 


kz- 6 
b7C 




6 Telec(jmmunic|tions intercept and Collection Technology Unit (TICTU) is in the process of developing a system 




and stratggy fa 


"Jut of the DCS 3000 system. We have developed a "proof of concept" demonstration of the 


system mat we wouia rrtte 

to Invite you to in order to discuss the security aspects of this. It shouldn't take much more than a half hour from start to 
finish (including discussions.) 

Attached is a description with some background information. Let me know when you are available. We feel that applying 
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SE 

this to actual cases can enhance 
the investigative resources available to the field and are anxious to move forward. Thanks for your time. 


SENSITIVE BUT! 


I ~l (OTP) (FBI) 


From: i-,: 

Sent: r-', 

To: 

Subject; 


]lTD) (FBI) 


01 2004 5*30 PM 
I IflTDt (FBI) 


FW: Okf Seattle-Portland DCS-3000 Lease Line 


UMCLASglFIBD 

NON-RECORD 


^ould you look into the connections and let him know? Sorry to be dumping these on you but t know you 
have a log of what connections are cut over 4 

L^7C 


O riginal Message 

Fror rf I fSF^ (FBI) 

fignf; Wp dne«iav. j^ente mher 01, 2004 1:59 PM 

To l J flTD) (FBI) 

Subject; Old Seattle-Portland DCS-3000 Lease Line 


TINLLASSIHED 

NON-RECORD 


I I we have left up the leas e line te tween Seattle and Portland that was previously used for the DCS-3000, just in case 
we had problems wil^ the nev i r etwork. Since everything seems to be working fine with the new network, we are 
going to take down the old circuit, l here is no activity on the modem, so it looks like there is nothing using that line. I just 
wanted to double check with you that there is no further need for that line. Let me know. 


Seattle 


HMOI AD6IEirn 

yUCUSSiE!i& 
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SEbKEJ 


( 



lOTD) (FBI) 

From: I (FBI) 

Sent: ^ 01 , 2004 1 1 ;44 AM 

To: ■ ' I l /iTm (FBI) 

Subject: FW: SF 56K Circuits 


NON-RECORD 


ould you confirm ttiis in the routers and le^ 


now? Thanks. 


nrininat Mocea/iia 1 . g 

From: I I (SF) (FBI) b 

Se nt! Monday, August 23 , 2004 5:38 PM 
Toil rrm^ (fbi) 

Subject: SF 56K Circuits 


UMClLAAS IF I gtr 

NON-RECORD b2 

Ih rC :i..- 


now that we’re on th j | let. c 
told me before that I had to maintain th** 


in I cancel the LA ^ d Sacramento 56K Circuits for the DCS 3000? 
I Circuits, I'm I correct? 


I believe you 


OUeUtOO lHBO- 

A^giEicn 


SE^T 
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Gentlemen, 

A n update. This t arget, according to source information, utilizes th j | f eature. I have been in contact 

witrt E RF, and have been advised that we will most likeiv t>e me Tirst in the ^u i^u to do this type of inteceo 

I l ad vised me that in their tests so far, th ey use a separate DCS3000 to route the au dio] 
pcssQO O i b nd then into VoiceBox just like a f I nput 

I la dvised me that there are three virays of getting this audio from the CMP/26 to BQ. The first choice would be to 
use the T*span, solely dedicated to this intercept. The second choice would be using the ISDN lines, I do currently have 
one ISDN line at BQ. We would have to have a open connection between my ISDN lines and the CMP's. I am trying to 
get information as to the cost involved in having the line open 24/7. The third choice would be a 56K dedicated circuit. 

JjuOeep you advised as this should be educational. 

I I please correct me if I misunderstood anything I listed above. 

Thank vou. 


SENSITIVE I 


SENSITIVE BUT UNffhftOOiriED 


SI 


[ 


From: 

Sent: 

To: 

Subject: 



ItOTD) (FBI) 





RE; U & N's 


1(ER) (FBI) 

4 9:56 AM 
_^_](MN) (FBI) 


UIIULAaSII ILTT 
NON-RECORD 


The codes for "CNDRS" format Version 3.0 are as follows: 


Hope this helps. 


h2 

b7E 


Original 

From ! l(MN) (FBI) 


iti Wedrtf««lav. Anril ?.ft. 2004 4:33 PM 


To 

Subject: FW: U & N's 


1 28 , 2004 4 -j 
(ER) (F6I);[ 




]CER) (FBI) 


OW&LASSiF I EEt 

NON-RECORD 


Can you answer this question from my analyst regarding DCS 3000 codes? 


Please send your response back to me and 


Thanks, 


Origingljlggggg™- 

Prnml |Mrj\ (FBI) 

S ent: Wednesday. April 28, 20 04 11:19 AM 
To i ^ MN) (FBI) 

Subject: U & N's 


UMabA 6Ci r iB& 

NON-RECORD 
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Under the direction portion of the information for the DCS-3000 I know the I is for incoming, 0 is for outgoing, what 
v^«re U & N again? 

I’ve attached a sample file. 

Thanks! 

UNCUSSIQED 

WH OLACC i r iBP— 


53 


5E^T 


